I want to know, Is there any websites which has malware files (Windows OS) that are detected by YARA rules?
Note: I know some websites to get android malware samples using YARA. But, I need Windows OS based malware.
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.Sign up to join this community
An additional source of such samples, which I don't know why nobody listed, is virustotal.com. It lets you execute what they call "ruleset" and "retrohunt" searches which are basically running yara rules on every sample processed through virustotal and every sample from the last 3 months. This is a paid service but it's definitely worth it.
Here's an image that shows the retro-hunt and yara search web UI:
afaik shadowserver offers a service like this to business partners (you send yara rules and get matching samples from honeypots in return), but there is no such service for free or personal use.
You can try to set up your won honeypot for current malware samples (there is a broad range of software for this) or try to run your yara rules on your own malware repository (i.e. collect all samples you can find from free sources and apply your yara rules).
If you are not in that business, you will not be able to rely on services like virustotal intelligence who offer the biggest malware corpus I know of.
That being said, a lot of community-driven or free malware sample collections failed at some point. Please be aware of that when starting a service of your own.
So let me google that for you... What about: