CLI wrapper for malware bazaar API (bazaar.abuse.ch)
Project description
(Malware)Bazaar
A MalwareBazaar API wrapper and CLI
Installation
If you want to use the API only:
pip install malwarebazaar
If you want to use the CLI:
pip install malwarebazaar[cli]
Note: Previous versions also included pre-built binaries, however, I stopped adding them. Please just use a local python environment instead.
Usage
Python
from malwarebazaar.api import Bazaar
bazaar = Bazaar("myapikey")
response = bazaar.query_hash("Hash to search for.")
file = bazaar.download_file("Sha256 hash for file to donwload.")
CLI
$ bazaar init myapikey
Successfully set API-Key!
$ bazaar query hash f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
Filename: 03891ab57eb301579005f62953dfd21e.exe
MD5: 03891ab57eb301579005f62953dfd21e
SHA1: 41efd56ea49b72c6dd53b5341f295e549b1b64a5
SHA256: f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
Imphash: f34d5f2d4577ed6d9ceec516c1f5a744
Signature: RedLineStealer
Tags: exe, RedLineStealer
$ bazaar download f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807
$ file f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.zip
f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.zip: Zip archive data, at least v5.1 to extract
$ bazaar download f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807 --unzip
$ file f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.exe
f670080b1f42d1b70a37adda924976e6d7bd62bf77c35263aff97e7968291807.exe: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
malwarebazaar-0.1.5a2.tar.gz
(9.1 kB
view details)
Built Distribution
File details
Details for the file malwarebazaar-0.1.5a2.tar.gz.
File metadata
- Download URL: malwarebazaar-0.1.5a2.tar.gz
- Upload date:
- Size: 9.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: poetry/1.2.2 CPython/3.10.6 Linux/5.19.0-76051900-generic
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | e7dc468f2dc3967e863644f40237f70f86e256ff513bd87a1a4b368377b25156 |
|
| MD5 | 323e5b494754459601ab21a9f5d6b8f4 |
|
| BLAKE2b-256 | ef76f2309455926b4394d86e652d64782d22a558df5a509aea02887b03121612 |
File details
Details for the file malwarebazaar-0.1.5a2-py3-none-any.whl.
File metadata
- Download URL: malwarebazaar-0.1.5a2-py3-none-any.whl
- Upload date:
- Size: 12.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: poetry/1.2.2 CPython/3.10.6 Linux/5.19.0-76051900-generic
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | c048769c1e35276d5e85106dece6c75bd0fb0b492b6461f7e6e3e300bbf831a0 |
|
| MD5 | fdd6ddc75471455b01783a7722470d34 |
|
| BLAKE2b-256 | 9d9c537925c2c034bb5db8d80285015f49ef6cc840bc653215134f28922c92bf |
