MalwareBazaar offers the exporting hash lists in the following formats:
Recent datasets ("recent additions") include hashes for the last 48 hours and are being generated every 5 minutes. Please do not fetch them more often than that. Full data dumps include all hashes and are only being generated once per hour. Please do not fetch them more often than once per hour.
The following data exports exists in CSV format:
Plain text files
The following data exports exists in plain text format:
Code Signing Certificate Blocklist (CSCB)
MalwareBazaar maintains a blocklist that consists of Code Signing Certificates used by threat actors to sign malware. It is being generated every 5 minutes. More information about the CSCB is available on the FAQ page.
- Full data dump ( download)