MalwareBazaar

MalwareBazaar is a project from abuse.ch with the goal of sharing malware samples with the Infosec community, AV vendors, and threat intelligence providers.

Category

Data Enrichment & Threat Intelligence

Pack

MalwareBazaar

Configuration parameters

• url — Server URL (required)
• credentials —
• integrationReliability — Source Reliability (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (4)

• file — Check if a particular malware sample is known to MalwareBazaar.
• malwarebazaar-comment-add — Add a comment for a malware sample.
• malwarebazaar-download-sample — Download a malware sample from MalwareBazaar. Any malware sample downloaded from MalwareBazaar is zipped and password protected using the password "infected" (without "").
• malwarebazaar-samples-list — Retrieves a list of recent malware samples (maximum 1000) associated with a specific sample type. Note that you can either use the limit argument or the page and page_size argument.