Virustotal enrichement not returning hash types
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 377
- Forks
- 280
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 10
Description
Hi,
When using the virustotal module to expand a hash previously I would get a return of 3 types of hash which are MD5, SHA1 and SHA256. However, when I do a git pull to update the misp-modules and upgrade it, it now only returns back a single hash value and most of the time it's the same hash value which I was trying to expand.
I my upgrade the modules using the below procedure:
- cd /usr/local/src/misp-module
- git pull
- pip3 install --upgrade -r REQUIREMENTS
- pip3 install --upgrade .
and restart the misp-modules.
Is there anything wrong with the upgrade procedure I'm using or is it a bug in the code? I can confirm that VirusTotal has all the hash type (MD5, SHA-1 and SHA-256) of the SHA-1 value which I was querying.
FYI, I am using a public API key.
Thanks.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the issue with the VirusTotal module, the reported SHA-1 value, and the public API key after the listed upgrade procedure. Compare the module's single returned hash with the MD5, SHA-1, and SHA-256 values available from VirusTotal; done means the expected hash types are returned consistently.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100