malware-hash

Query VirusTotal for hash reputation and per-vendor malware detection results.

21|1|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill malware-hash
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: malware-hash
Source: https://github.com/woohyun212/security-skill/tree/main/malware-hash
Command: npx skills add https://github.com/woohyun212/security-skill --skill malware-hash

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly determine the malware risk of file hashes by querying VirusTotal for reputation, per-vendor results, and lifecycle metadata.

Core Features & Use Cases

  • Query MD5/SHA1/SHA256 hashes to retrieve malware reputation and detection ratios
  • Return per-vendor results, first/last submission dates, and tags for risk assessment
  • Support bulk hash analysis for IOC triage during incident response

Quick Start

Provide a hash or file path and run the skill to retrieve its VirusTotal reputation.

Frequently Asked Questions about malware-hash

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a file hash reputation on VirusTotal for malware analysis?

VirusTotal hash reputation checks involve querying the API v3 with MD5, SHA1, or SHA256 inputs to retrieve malware detection ratios, per-vendor results, and submission metadata for incident response triage.

Can I perform bulk hash analysis for IOC triage during incident response?

Yes, you can perform bulk hash analysis for IOC triage during incident response by processing multiple MD5, SHA1, or SHA256 hashes simultaneously to identify malware risks across your dataset.

Do I need a VirusTotal API key to retrieve vendor results and detection stats?

Yes, a VirusTotal API key is required to fetch last_analysis_stats, per-vendor results, first_submission_date, and last_submission_date metadata for assessing malware risk.

What metadata is available when querying VirusTotal for malware hash reputation?

Querying VirusTotal returns last_analysis_stats, per-vendor detection results, first_submission_date, last_submission_date, and tags, providing comprehensive lifecycle metadata for malware risk assessment.

What is the best way to identify malware risk from file hashes during an investigation?

The best way to identify malware risk is querying VirusTotal with file hashes to retrieve detection ratios and vendor results, enabling rapid IOC analysis and incident response triage.