Export all visible hashes in Virustotal intelligence

157 views
Skip to first unread message

jumbo freak

unread,
Jul 7, 2022, 6:09:47 AM7/7/22
to VirusTotal
Hi all,
Hope you all are doing well. Group isn't active,I'll still try my luck as I don't know other discussion forums for VT.
Is there a way to export all visible hashes when you search something in Virustotal intelligence search ?
It's from the one described here -
https://support.virustotal.com/hc/en-us/articles/360001387057

Andriy Brukhovetskyy

unread,
Jul 7, 2022, 6:03:25 PM7/7/22
to VirusTotal
Hello you can use my script https://github.com/doomedraven/VirusTotalApi
so just run vt.py -si "intelligence_query" and you will get them, just check -h as there is output limit 

jumbo freak

unread,
Jul 8, 2022, 5:03:11 AM7/8/22
to VirusTotal
Thank you sir. Do you know the limit of the hashes we can get upto? I have about 25000 hashes to export.

Andriy Brukhovetskyy

unread,
Jul 8, 2022, 5:31:30 AM7/8/22
to virus...@googlegroups.com
If you have private apikey you can do it, just see option to set proper limit in script, as far as i remember i put 300 as default

--
--
Choose a file, check it with more than 50 antivirus, fast and easy: http://www.virustotal.com
---
You received this message because you are subscribed to a topic in the Google Groups "VirusTotal" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/virustotal/4GFIEHNjf2A/unsubscribe.
To unsubscribe from this group and all its topics, send an email to virustotal+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/virustotal/4169fda0-78f1-448c-a393-33e4404637c7n%40googlegroups.com.

jumbo freak

unread,
Jul 8, 2022, 6:35:11 AM7/8/22
to VirusTotal
great, thank you.

jumbo freak

unread,
Jul 8, 2022, 9:41:11 AM7/8/22
to VirusTotal
I tried few times with the following input, maximum I can get is around 1520 even after specifying higher limit, not sure if it is script or the API itself.

python vt.py -sil 30000 -si "size:11MB+ tag:zip ls:2022-05-0116:00:00+ positives:5+"  (has over 27k+ hashes)
Reply all
Reply to author
Forward
0 new messages