Here is a collection of malicious PDF, DOC, XLS, PPT, PPS files that can be used for testing your product signatures, en masse analysis or as a malware aquarium starter kit.
Files are NOT password protected inside the archive but there is = added to their extensions. Remove = if you need to run them.
1) COLLECTION 1 -
240 251 files (70 MB) - Email attachments from targeted attacks
Contagio collection (many but not all are posted on Contagio). These are email attachments - 99% of them are from targeted or spear phishing attacks. It contains COLLECTION 2 (0-Day files). Sorted by CVE+DateReceived -- New
2) COLLECTION 2 -
7 10 files (3 MB) - Zero day files
Collection of files that were original 0-day files - first received by Contagio or posted online (see PDF threats on the Malware Tracker blog for the timeline) Sorted by CVE+DateReceived --New
3) COLLECTION 3 (from Stephan Chenette) - 118 Files (5MB) - Web exploit pdf files +
4) COLLECTION 4 (from Stephan Chenette) - 10,980 Files (243 MB) - Web exploit pdf (I think they all are pdf) files
Awesome and huge collection of files (COLLECTION 3 and 4) kindly provided by Stephan the Great ;), creator of the Fireshark, the web analysis tool. These files were collected online and mostly come from exploit packs and drive-by exploits. Sorted by SHA1 Hash -- New
5) COLLECTION 5 Non-Malicious PDF Collection (from Stephan Chenette) - 6,052 clean files (1.4GB) to make sure your product does not detect them as bad (There is no password on the zip with clean PDFs)--New
6) COLLECTION 6 - http://contagiodump.blogspot.com/2011/03/request-for-samples.html - a few targeted attack samples there
P.S. If this was not enough and you want "MOAR", check out Links and resources for malware samples
Download COLLECTION-1 | Download COLLECTION-2 | Download COLLECTION-3 | Download COLLECTION-4 | Download NON-MALICIOUS-COLLECTION-5
Password protected archives, email me if you need the password.
See what is included in each collection below:
COLLECTION 1 |242 files | PDF and MS Office Files | duplicate Md5 hash values are colored
COLLECTION 2 | 0-Day | 7 Files | PDF and MS Office Files
COLLECTION 3 | 118 Files | mostly web exploit files | PDF only |