MalwareBazaar API

A high-speed REST API for querying, uploading, and hunting millions of malware samples within the abuse.ch ecosystem.

MalwareBazaar API provides security researchers with direct access to a massive repository of malicious binaries. Operators can query the database using SHA256 hashes, tags, or file types (like .exe or .elf) to retrieve technical metadata and download samples for analysis. The API supports automated hunting via YARA rules and integrates seamlessly with platforms like MISP or Cortex. By leveraging simple POST requests to the api.abuse.ch endpoint, teams can automate their threat intelligence workflows and stay ahead of emerging campaigns without manual overhead.

https://bazaar.abuse.ch/api/