malware-hash

Query VirusTotal for hash reputation and per-vendor malware detection results.

21|1|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill malware-hash
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: malware-hash
Source: https://github.com/woohyun212/security-skill/tree/main/malware-hash
Command: npx skills add https://github.com/woohyun212/security-skill --skill malware-hash

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly determine the malware risk of file hashes by querying VirusTotal for reputation, per-vendor results, and lifecycle metadata.

Core Features & Use Cases

  • Query MD5/SHA1/SHA256 hashes to retrieve malware reputation and detection ratios
  • Return per-vendor results, first/last submission dates, and tags for risk assessment
  • Support bulk hash analysis for IOC triage during incident response

Quick Start

Provide a hash or file path and run the skill to retrieve its VirusTotal reputation.

Frequently Asked Questions about malware-hash

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a file hash reputation on VirusTotal for malware analysis?▼

VirusTotal hash reputation checks involve querying the API v3 with MD5, SHA1, or SHA256 inputs to retrieve malware detection ratios, per-vendor results, and submission metadata for incident response triage.

Can I perform bulk hash analysis for IOC triage during incident response?▼

Yes, you can perform bulk hash analysis for IOC triage during incident response by processing multiple MD5, SHA1, or SHA256 hashes simultaneously to identify malware risks across your dataset.

Do I need a VirusTotal API key to retrieve vendor results and detection stats?▼

Yes, a VirusTotal API key is required to fetch last_analysis_stats, per-vendor results, first_submission_date, and last_submission_date metadata for assessing malware risk.

What metadata is available when querying VirusTotal for malware hash reputation?▼

Querying VirusTotal returns last_analysis_stats, per-vendor detection results, first_submission_date, last_submission_date, and tags, providing comprehensive lifecycle metadata for malware risk assessment.

What is the best way to identify malware risk from file hashes during an investigation?▼

The best way to identify malware risk is querying VirusTotal with file hashes to retrieve detection ratios and vendor results, enabling rapid IOC analysis and incident response triage.