Multiple sha1 file hashes conversion

hash

Issue Description:
I'm trying to comply with our Security Advisories. The advisories contain nearly 1000 MD5 & Sha 256 file hashes. I need to convert them into sha1 and update them in our endpoint security product because our endpoint security product only accepts SHA1 hashes. Normally, we use Virus Total (https://www.virustotal.com/#/home/search) to get the SHA1 hashes. But I can only put 1 SHA256 or MD5 hash at a time. Converting hashes into Sha1 is definitely going to take up a lot of production time.

Question:
Is there any way, I can automate the conversion process?

PS: We are running a Windows environment.

TIA

Best Answer

If I understand your question correctly, you have hashes for malware and you need the SHA1 hashes of those malware code instead of MD5 and SHA256.

If this is the case, you can use the API of the VirusTotal site you are already using to query their database directly.

First you need to get an API key.

In order to use the API you must sign up to VirusTotal Community. Once you have a valid VirusTotal Community account you will find your personal API key in your personal settings section. This key is all you need to use the VirusTotal API.

With this API key you can use the API to get the SHA1 hashes from their database.

The API is documented here:

https://developers.virustotal.com/v2.0/reference#file-search

There are also libraries for most popular scripting and programming languages to make the usage of the API easier:

https://support.virustotal.com/hc/en-us/articles/115002146469-API-scripts

Related Topic