r/VirusTotal

Been building this for a while and figured people here might find it useful.

What it is: a local Flask app + curated catalog that aggregates samples from public research collections (theZoo, VX-Underground, MalwareBazaar, InQuest, javascript-malware-collection) into one searchable index, instead of jumping between a dozen repos.

What's different from just cloning the sources separately:

80 historical families, deduplicated — variants/rebrands of the same malware (Petya/NotPetya/GoldenEye/Satana) collapsed into one entry with timeline, attribution and impact, instead of showing up as 5 separate hits
Every sample auto-encrypted (zip + infected password) on ingestion — zero raw executables ever touch disk unencrypted
A fuzzy-matching indexer that links loose sample files to catalog entries by name/alias, with guards against false positives
Grows via MalwareBazaar's official API (verified hash, not random "index of /" scraping)
Bilingual (ES/EN), fully local — nothing served over the network by default

Repo: https://github.com/darama22/Malware-Research-Hub

Feedback welcome, especially on the family-deduplication logic — that was the hardest part to get right without over- or under-merging variants.

Safe or nah?

I built an open-source hub that catalogs 80 deduplicated malware families (1971–2024) and indexes 2,700+ real samples from public research collections — searchable, bilingual, local-first