MWDB Feeds

A Modular MWDB Utility to Collect Fresh Malware Samples

This project is FREE as in FREE 🍺, use it commercially, privately or however you see fit.

If you like this project and wish to donate 💰 to support the fight against malware...

Buy me a 🍵, as I don't drink 🍺, by sending me some ₿ to 16oXesi7uv3jdPZxxwarHSD2f3cNMpaih9

Installation from Source:

sudo apt install -y python3-virtualenv python-is-python3
git clone --recursive https://github.com/c3rb3ru5d3d53c/mwdb-feeds.git
cd mwdb-feeds/
virtualenv venv/
source venv/bin/activate
./setup.py install
nano mwdb-feeds.ini                                            # Edit your Configuration File
mwdb-feeds --config-file mwdb-feeds.ini --list-modules         # List Modules
mwdb-feeds --config-file mwdb-feeds.ini --module malwarebazaar # Run Single Module
mwdb-feeds --config-file mwdb-feeds.ini                        # Run All Modules

Installation from PyPi:

sudo apt install -y python3-virtualenv python-is-python3
virtualenv venv/
source venv/bin/activate
pip install mwdb-feeds
git clone https://github.com/c3rb3ru5d3d53c/mwdb-feeds-modules.git modules/
find modules/ -name "requirements.txt" | while read i; do pip install -r $i; done
nano mwdb-feeds.ini                                       # Edit your Configuration File
mwdb-feeds --config mwdb-feeds.ini --list-modules         # List Modules
mwdb-feeds --config mwdb-feeds.ini --module malwarebazaar # Run Single Module
mwdb-feeds --config mwdb-feeds.ini                        # Run All Modules

Configuration:

[mwdb-feeds]
threads = 1
modules = modules/
debug = True
log = False
url = https://mwdb.local/api/
username = <your_username_here>
api_key = <your_api_key_here>
verify_ssl = True

Make sure you have also configured each module in your mwdb-feeds.ini file.

• VXVault
• MalwareBazaar
• Twitter
• MalShare
• VirusTotal LiveHunt

To regularly update your instance try using cron.

Contributing:

If you wish to contribute your own modules, please refer to CONTRIBUTING.md