Virustotal Falsepositive Detector

less than 1 minute read

A simple tool to organise large malicious/benign files into a organised Structure.

Source Code : Virustotal-Falsepositive-Detector

Hit Counter : HitCount

PreRequsite

Get the Virustotal API Key.

Usage:

Step-1 :

Clone the Repo


git clone git@github.com:uppusaikiran/virustotal-falsepositive-detector.git
Cloning into 'virustotal-falsepositive-detector'...
remote: Counting objects: 38, done.
remote: Compressing objects: 100% (27/27), done.
remote: Total 38 (delta 5), reused 38 (delta 5), pack-reused 0
Receiving objects: 100% (38/38), 13.37 KiB | 0 bytes/s, done.
Resolving deltas: 100% (5/5), done.
Checking connectivity... done.

Step-2:

Change to the Folder

cd virustotal-falsepositive-detector

Step-3: Fill the Virustotal API Key in the settings.py file.

Step-4: Run the Script

python app.py -h
usage: app.py [-h] [-v] hash

VirusTotal FalsePositive Detection Tool

positional arguments:
  hash           MD5 of the sample

optional arguments:
  -h, --help     show this help message and exit
  -v, --version  show program's version number and exit

python app.py 78a3a34cee255667095aac8ccb7540f3
The Result of Hash 78a3a34cee255667095aac8ccb7540f3 is potential false positive

python app.py 43e2e0bef675c300e648c82874149d79
The Result of Hash 43e2e0bef675c300e648c82874149d79 is potential malware