URLhaus

URLhaus has the goal of sharing malicious URLs that are being used for malware distribution.

Category

Data Enrichment & Threat Intelligence

Pack

URLHaus

Configuration parameters

• url — Server URL (e.g. https://192.168.0.1)
• credentials —
• integrationReliability — Source Reliability (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• create_relationships — Create relationships
• max_num_of_relationships — Maximum number of relationships to fetch per indicator
• threshold — Blacklists appearances threshold
• compromised_is_malicious — Compromised (is malicious)
• retry — Number of retries
• should_error — Return Error

Commands (4)

• domain — Retrieves domain information from URLhaus.
• file — Retrieves file information from URLhaus.
• url — Retrieves URL information from URLhaus.
• urlhaus-download-sample — Downloads a malware sample from URLhaus.