Plugin for Sarlacc to automatically upload all previously unseen samples to the awesome malshare API

To install this plugin, simply clone the repo into the smtpd/src/plugins directory in the Sarlacc repo and then run pip install -r requirements.txt from inside the plugin repo.

cd smtpd/src/plugins
git clone https://github.com/scrapbird/sarlacc-malshare
cd sarlacc-malshare
pip install -r requirements.txt

For the malshare plugin to work it will need an API key, register at https://malshare.com/. Once you have an API key, create a file named malshare.cfg with the following contents in the sarlacc-malshare root

[malshare]
key = API_KEY_GOES_HERE

That's it, restart Sarlacc and it will upload any new samples to malshare. If you are using docker, remember to rebuild the docker container to include your latest plugins.