_malware.md

Malware Information

Get Malware Family Information

curl "https://api.emergingthreats.net/v1/malware/{malware_family}"
  -H "Authorization: SECRETKEY"

import requests
api_key = "SECRETKEY"
url = "https://api.emergingthreats.net/v1/malware/{malware_family}"
headers = {'Authorization': f'{api_key}'}
response = requests.get(url, headers=headers)
print(response.json())

The JSON response should look something like:

{
    "success": true,
    "response": {
        "name": "SocGholish",
        "description": "**SocGholish** is the name given to a malicious HTML injection written in JavaScript..."
    }
}

This endpoint retrieves the biographical information that PFPT has compiled on the malware families listed in the rule metadata. Please follow the spelling and capitalization format found in the rule to ensure the response is valid. E.G. SocGholish

HTTP Request

GET https://api.emergingthreats.net/v1/malware/{malware_family}

Response Parameters

Parameter	Optional?	Description
name	No	The name of Malware family.
description	No	The description of Malware Family.

This will return information on malware families. The only variable here is the malware family name which can be found on the rule’s metadata (e.g. Socghoulish)