Developers can check API Specification here:
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/sample/8bd34eab624b7c0d38bf56cb981fa0db758584d0571ea8e83247453c77cc640d
import requests
import json
url = 'https://api.maltiverse.com/sample/8bd34eab624b7c0d38bf56cb981fa0db758584d0571ea8e83247453c77cc640d'
response = requests.get(url)
print(json.dumps(response.json(), indent=4, sort_keys=True))
$url = 'https://api.maltiverse.com/sample/8bd34eab624b7c0d38bf56cb981fa0db758584d0571ea8e83247453c77cc640d'
$headers = @{Authorization=("Bearer {0}" -f "<API_KEY>")}
$response = Invoke-RestMethod $url -Headers $headers
Write-Output $response
{
"blacklist": [
{
"count": 25,
"description": "Generic Malware",
"first_seen": "2025-06-29 07:00:02",
"last_seen": "2025-06-29 11:45:15",
"ref": [
21745
],
"source": "Hybrid-Analysis"
}
],
"classification": "malicious",
"creation_time": "2025-06-29 06:55:32",
"filename": [
"pratilipi-1-[apkmodct.com].apk"
],
"filetype": "Zip archive data, at least v2.0 to extract, compre ...",
"is_alive": false,
"is_cdn": false,
"is_cnc": false,
"is_distributing_malware": false,
"is_hosting": false,
"is_iot_threat": false,
"is_known_attacker": false,
"is_known_scanner": false,
"is_mining_pool": false,
"is_open_proxy": false,
"is_phishing": false,
"is_sinkhole": false,
"is_storing_phishing": false,
"is_tor_node": false,
"is_vpn_node": false,
"md5": "279c564df273bf96fd9cffee8b13b16f",
"modification_time": "2025-06-29 11:45:16",
"score": 9.2,
"scoring_executed_time": "2025-06-29 07:00:04",
"sha1": "48e6e7f4edab92497341bcef2bf29fe40f38f6d4",
"sha256": "8bd34eab624b7c0d38bf56cb981fa0db758584d0571ea8e83247453c77cc640d",
"size": 24147473,
"tag": [
"rat"
],
"type": "sample"
}