Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Susp DGA from VT: A fix length of 32, mix a-z and 0-9, tlds: [info] #2

Open
suqitian opened this issue Aug 9, 2016 · 0 comments
Open

Comments

@suqitian
Copy link
Member

suqitian commented Aug 9, 2016

  • MD5
    ad96cdc76bb48811adc89fb56805e2ba
  • Domain looks like generate by DGA:
    2bj9j5mq889idfca58p7ccu13t3fnlvj.info
    2bl19mo5ogcp3asl65v6fe14akilfg4a.info
    2blap6o4oe22b3mamjkullosijakpbdb.info
    2blg650v4f1j618mv0vd0gn4e8kr2k6c.info
    2bm50afm9g8kp6m2krrrkigltf9qa1j1.info
    2bm52tgg6rokrjimvaqlofg7gp3nm7qi.info
    2bm5iv7ldho1tl86gg2otnb5b4k5gnna.info
    2bpejvagmkq37q1bgaoodkp221q4pqos.info
    2bphpmdvekaisljla693ievnhmbcvufl.info
    2bq2g61r7ae1qupho62ve16nh3p9vbrd.info
    2bqaopr0tkkj5gfq9fmg96u29fcdhked.info
    2br4ochmourhe8hb78minnjbgsakiv9c.info
    2brhhkf3aki13eer6rscl9e429m09rsb.info
    2brk2u55hj6i4ei58m8o8jfe8d51t3of.info
    2brl336dpt2pksj8tk7i5dm922jgfbsk.info
    2bs5lcpgcc0ngei65to1aijlbg3scegf.info
    2bseo1glsqvmg75b7k01lohrnjd26nh5.info
    2bsikvav62s3k33eahit1f2a44pd16rc.info
    2bsquch4rsjfmpv4l5h598fubo7bf31d.info
    2bulpig5la0p4n8d7o1n3bjabq294v07.info
    2bviemlmpendv4epu2qbvafdfq1o3uij.info
    2bvivlal9pr17hotv0lujfupl8br87t8.info
    2c1afcvq2nu3qv99tq4a93ncr6t579tf.info
    2c1sq984vdrs9k76ggec5romfvkvm38e.info
    2c2l66mlei0tqf79335jvl0gdi2eaacq.info
    2c3icokbmsoko5bdq57v2fcaahbqu92d.info
    2c42751iffqs20pupnsd18qah8ubp3j0.info
    2c4es278v5tnh2hqda5etdctb183q9qt.info
    2c4f71slqdig38afc9jbbq0lmnqog71t.info
    2c4jiita8fvrl756evu5v1vu7j4dj3ii.info
    2c5in883a9uc8mdpad5uvdlrfmapbcji.info
    2c5n5hdv257m70jnaenv4v9ogljf9uui.info
  • But this sample also query these domains, made me confused whether it implemented a DGA.
    300birch.info
    300blkusa.info
    300boerboels-germany.info
    300book.info
    300bushelcorn.info
    300canalbldg3.info
    300canalbldg5.info
    300canal.info
    300capitalists.com
    300capitalists.info
    300capitalmanagement.info
    300capmanagement.info
    300cchrysler.info
    300cc.info
    300cedarbraecourt.info
    300cheltenhamave.info
    300coach.info
    300colastreet.info
    300cubits.info
    300daily.info
    300dd.info
    300d.info
    300dishduel.info
    300-dollar-data-recovery.info
    300dollardatarecovery.info
    300dollardays.info
    300dollars.info
    300dpi.info
    300dundee110a.info
    300dundee305.info
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant