Upload files to "TTPs/Analysis"

TTPs/Analysis/analysis_filehash.py

@@ -0,0 +1,58 @@
+import os
+import subprocess
+import webbrowser
+from Modules.submenu import build_submenu
+
+def analysis_filehash_submenu():
+    """
+    Submenu for file hash analysis tools and methods.
+    """
+    actions = {
+        "1": {"description": "Get File Hash (MD5)", "function": get_file_hash_md5},
+        "2": {"description": "Check File Hash on VirusTotal", "function": check_virustotal},
+        "3": {"description": "Other Hash Algorithms (SHA1/SHA256)", "function": get_file_hash_other},
+    }
+    build_submenu("File Hash Analysis", actions)
+
+# Functions for file hash analysis
+
+def get_file_hash_md5():
+    """
+    Run a PowerShell command to get the MD5 hash of a file.
+    """
+    file_path = input("Enter the full file path: ").strip()
+    try:
+        if os.name == 'nt':  # Check if running on Windows
+            command = f'powershell.exe Get-FileHash -Algorithm MD5 "{file_path}"'
+            subprocess.run(command, shell=True)
+        else:
+            print("This command is only available on Windows with PowerShell.")
+    except Exception as e:
+        print(f"Error running PowerShell command: {e}")
+
+def check_virustotal():
+    """
+    Open VirusTotal to check the file hash.
+    """
+    file_hash = input("Enter the file hash (MD5, SHA1, or SHA256): ").strip()
+    url = f"https://www.virustotal.com/gui/search/{file_hash}"
+    webbrowser.open(url)
+    print(f"Opening VirusTotal for hash: {file_hash}")
+
+def get_file_hash_other():
+    """
+    Run a PowerShell command to get SHA1 or SHA256 hash of a file.
+    """
+    file_path = input("Enter the full file path: ").strip()
+    algorithm = input("Enter the hash algorithm (SHA1 or SHA256): ").strip().upper()
+    if algorithm not in ["SHA1", "SHA256"]:
+        print("Invalid algorithm. Please choose SHA1 or SHA256.")
+        return
+    try:
+        if os.name == 'nt':  # Check if running on Windows
+            command = f'powershell.exe Get-FileHash -Algorithm {algorithm} "{file_path}"'
+            subprocess.run(command, shell=True)
+        else:
+            print("This command is only available on Windows with PowerShell.")
+    except Exception as e:
+        print(f"Error running PowerShell command: {e}")