Find Malware Samples from a File Hash

ANY.RUN

an interactive malware sandbox for analyzing suspicious files, URLs, and netw

ANY.RUN Threat Intelligence Lookup

ANY.RUN sandboxed runs IOC lookup

Autopsy

a digital forensics platform for investigating disk images, filesystems, and

FLOSS

a FLARE tool for extracting obfuscated strings from malware and suspicious bi

Hatching Triage

a malware sandbox for analyzing files, URLs, configurations, and behavioral i

Hybrid Analysis

a malware analysis platform that runs files and URLs in sandbox environments

Imunify360 Sandbox

Palo Alto WildFire malware analysis portal

InQuest Labs

InQuest free DFI and IOC hunting tools

Intezer Analyze

a malware analysis platform that classifies files, code reuse, and threat rel

Joe Sandbox

a malware analysis sandbox for dynamic and static investigation of files, URL

Koodous

Android malware intelligence platform

MalShare

Community malware sample repository

MalwareBazaar

an abuse.ch malware sample exchange for searching hashes, tags, families, and

MalwareBazaar Browse

Researcher-run malware archive (vx-underground)

MetaDefender Cloud

Multi-engine scan of files, hashes, IPs and URLs

Mobile Verification Toolkit

a mobile forensics toolkit for checking Android and iOS devices for compromis

Polyswarm

Decentralized multi-engine TI marketplace

URLhaus

an abuse.ch project tracking malware URLs, payload delivery sites, and relate

UnpacMe

Automatically unpack malware samples and extract payloads

Volatility 3

a memory forensics framework for analyzing volatile memory images and artifac

YARA

a pattern matching engine for identifying malware families and binary artifac

YARAify

Community YARA hunting service

abuse.ch Hunting

Cross-platform IOC hunting over MalwareBazaar, ThreatFox, URLhaus and YARAify

capa

a FLARE tool that detects capabilities in executables using static analysis r