Malware.lu is a repository of malware and technical analyses for security researchers.

Malware.lu provides an expert team in malwares analyses and incident response for private and government entities.

Disclaimer:

Malware.lu contains malware samples. Malware.lu will not be held responsible for any damage brought to your equipment, including virus infection, caused by accessing, using or displaying this website or by downloading any information. You are accessing this website at your own risk.

If you would like to download or submit samples, you need to have an account. To request an account, please send an email to with a username and a short explanation about "why you want an account". Currently the database contains 5,572,622 samples. The complete list of md5|sha1|sha256 can be found here

In collaboration with itrust consulting located in Luxembourg, we offer services to private and government entities.

Our expertise allow us to provide a high quality of work. We can provide malwares analysis (static/reverse engineer & dynamic), reverse engineering and incident response. We do not simply use standard tools but each analysis is made rigorously and semi-manually
We also use a wide discretion.

Training
We offer training sessions to help companies and security researchers to adequately address safety malware analysis. For each part of the training, we provide samples form our database or virtual machines in order to test the techniques in real conditions.
We provide custom courses linked to malware analyses and incident response. The duration of the training is between 3 and 5 days depending of the number of topic. The training may be oriented from entry to expert. We can perform training in our office in Luxembourg or on site. Here is an example of topics available:

- malware identification

- artefact collection (filesystem, registry, event log...)

- forensics linked to malware analysis (for example memory dump analysis)

- behavior analysis (sandbox)

- reverse engineering (dynamic analysis with OllyDbg, static analysis with IDA Pro, unpack...)

- malware detection (yara, clamav, network signature)

- anti-debug, anti-reverse...

- Indicator Of Compromission (IOC) managment

- ...

Malware analyses and reverse engineering
We have a deep expertise in malware analysis and reverse engineering. We can provide a quality service to company insterested to outsource their analyses.
In order to show the level of quality our team provides, we have decided to share a public report. You can download the report here and the archive with the source code and samples analyzed in the report here.
For more information or to receive a quote please contact us at .

Incident response capability
In case of incident, the malware.lu team is able to take in charge the complete managment of a incident or being in technical support of the team already in charge of the incident. We have worked with many customers and we have gained considerable expertise in the management of this kind of incident. More information here.
For more information or to receive a quote please contact us at .

For more information or to receive a quote please contact us at .