MalwareBazaar

MalwareBazaar is a project from abuse.ch with the goal of sharing malware samples with the Infosec community, AV vendors, and threat intelligence providers.

Data Enrichment & Threat Intelligence · MalwareBazaar

Configuration parameters

  • url — Server URL (required)
  • credentials —
  • integrationReliability — Source Reliability (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (4)

  • file

    Check if a particular malware sample is known to MalwareBazaar.

  • malwarebazaar-comment-add

    Add a comment for a malware sample.

  • malwarebazaar-download-sample

    Download a malware sample from MalwareBazaar. Any malware sample downloaded from MalwareBazaar is zipped and password protected using the password "infected" (without "").

  • malwarebazaar-samples-list

    Retrieves a list of recent malware samples (maximum 1000) associated with a specific sample type. Note that you can either use the limit argument or the page and page_size argument.