Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: VirusTotal Email Submissions - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
VirusTotal Email Submissions

I think it's a good idea to highlight VirusTotal's Email Submission feature, as I recently had to point this out to a couple of people.

In stead of using the VirusTotal's web interface or API, one can also send an email to with the file to be scanned in attach (don't exceed 32MB) and subject SCAN (requesting plaintext report) or SCAN+XML (requesting XML report).

I usually get a reply after a couple of minutes. If I don't get a reply, it usually means that my attachment was detected and blocked by the email server I'm using, and that it never reached VirusTotal.


Didier Stevens
Senior handler
Microsoft MVP


649 Posts
ISC Handler
Dec 15th 2019
thanks Didier

Sign Up for Free or Log In to start participating in the conversation!