CLI wrapper for malware bazaar API (bazaar.abuse.ch)
Project description
(Malware)Bazaar
An Malwarebazaar API wrapper and CLI
Installation
pip install malwarebazaar
Usage
Python
from malwarebazaar.api import Bazaar
bazaar = Bazaar("myapikey")
response = bazaar.query_hash("Hash to search for.")
file = bazaar.download_file("Sha256 hash for file to donwload.")
CLI
$ bazaar init myapikey
Successfully set API-Key!
$ bazaar query hash f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
Filename: 03891ab57eb301579005f62953dfd21e.exe
MD5: 03891ab57eb301579005f62953dfd21e
SHA1: 41efd56ea49b72c6dd53b5341f295e549b1b64a5
SHA256: f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
Imphash: f34d5f2d4577ed6d9ceec516c1f5a744
Signature: RedLineStealer
Tags: exe, RedLineStealer
$ bazaar download f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
$ file f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.zip
f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.zip: Zip archive data, at least v5.1 to extract
$ bazaar download f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807 --unzip
$ file f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.exe
f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.exe: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
malwarebazaar-0.0.1.tar.gz
(6.5 kB
view details)
Built Distribution
File details
Details for the file malwarebazaar-0.0.1.tar.gz
.
File metadata
- Download URL: malwarebazaar-0.0.1.tar.gz
- Upload date:
- Size: 6.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: poetry/1.1.5 CPython/3.8.10 Linux/5.4.0-73-generic
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | 9161e246481c9d8cfd694af3f8db8bbcbc32bb0d1d7fbd0d95109c40842b99c2 |
|
MD5 | 3843379409e507ad7fe67e91f6004dbb |
|
BLAKE2b-256 | b6741639cd5e7a12f511ead22ded371c8ffa54f62f981976e2c50c4521a4eb96 |
File details
Details for the file malwarebazaar-0.0.1-py3-none-any.whl
.
File metadata
- Download URL: malwarebazaar-0.0.1-py3-none-any.whl
- Upload date:
- Size: 8.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: poetry/1.1.5 CPython/3.8.10 Linux/5.4.0-73-generic
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | fca7d444a93b3f894bf8967c994d734900a74d0bd9cb7f038fadd6ca5a5828dc |
|
MD5 | 5dc1850120b4e5f92623ddc56de94c27 |
|
BLAKE2b-256 | b878bb819158a4918c8899d5b8727c08ebbd6d05a5601c27fab6269b2dc45d99 |