APK_list

Easily extract and save a list of Android malware APKs from MalwareBazaar using their public API.

🧠 About the Project

APK_list is a simple Python script that connects to MalwareBazaar via their API and downloads the latest APK malware sample list (up to 1000 entries). It saves basic information such as SHA-256 hash, APK name, and date of first submission to a local text file.

This tool is useful for threat researchers, security analysts, and ethical hackers who want to keep an updated list of Android malware for analysis or automated processing.

✨ Features

• Fetches latest APK-tagged malware samples from MalwareBazaar.
• Saves output to a formatted malware_apk_list.txt file.
• Includes SHA-256 hash, file name, and first seen date.
• API error handling and clear output messages.
• Lightweight and ready to integrate in bigger analysis pipelines.

📋 Requirements

• Python 3.8 or higher
• requests library

Install dependencies:

pip install requests

🚀 Usage

Run the script directly:

python apk_list.py

The output will be saved in a file named malware_apk_list.txt in the same directory.

📁 Output Example

Listado de malware etiquetado como 'apk':

Hash SHA-256: e3b0c44298fc1c149afbf4c8996fb924...
Nombre APK: trojan_clicker.apk
Fecha de inclusión: 2024-10-10
----------------------------------------
...

🛠 To-Do

• [ ] Extract IOCs and log execution
• [ ] Filter by specific date ranges
• [ ] Filter by file names or hash patterns

❗ Known Issues

• Limited to 1000 samples per API call
• License not yet defined

🤝 Contributing

Feel free to fork this project and propose changes via pull requests. Any feedback is welcome!

☕ Sponsor Me

If you find this tool useful and want to support its development:

📜 License

🔒 License: Pending
This project currently does not have a formal license. Please do not use it in commercial applications until a license is defined.

Made with 🖤 by LimiteCero
For research, education, and malware hunting.

Ver en GitHub