mirror of https://github.com/MISP/misp-modules
10 lines
737 B
JSON
10 lines
737 B
JSON
|
{
|
||
|
|
"description": "Query the MALWAREbazaar API to get additional information about the input hash attribute.",
|
||
|
|
"requirements": [],
|
||
|
|
"input": "A hash attribute (md5, sha1 or sha256).",
|
||
|
|
"output": "File object(s) related to the input attribute found on MALWAREbazaar databases.",
|
||
|
|
"references": [
|
||
|
|
"https://bazaar.abuse.ch/"
|
||
|
|
],
|
||
|
|
"features": "The module takes a hash attribute as input and queries MALWAREbazaar's API to fetch additional data about it. The result, if the payload is known on the databases, is at least one file object describing the file the input hash is related to.\n\nThe module is using the new format of modules able to return object since the result is one or multiple MISP object(s)."
|
||
|
|
}
|