Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

From VT: A length of 12-16, a-z. tlds: [biz, com, info, net, org] #6

Open
suqitian opened this issue Aug 12, 2016 · 0 comments
Open

Comments

@suqitian
Copy link
Member

suqitian commented Aug 12, 2016

  • MD5
    9690bee17e9d4b83ae584f5d91849a6e
  • DNS requests in [VT]
    iieqqoytgohjytil.com
    iieqqoytgohjytil.info
    kpjprkqhsmqrmsj.org
    njpqlupthfhwxqns.com
    njpqlupthfhwxqns.org
    qwdlnpptqrgsdprf.net
    qwdlnpptqrgsdprf.org
    wtgtpbrzogowkjt.biz
    wtgtpbrzogowkjt.com
  • Then run it again in our Cuckoo Sandbox, DNS requests was a noticeable difference from the VT one.
    nmqgnfwphujk.biz
    nmqgnfwphujk.com
    znhignykyyfrdlj.info
    znhignykyyfrdlj.com
    thrusjzvpgjpaikl.net
    thrusjzvpgjpaikl.biz
    cvyqpjqvjdplssq.info
    cvyqpjqvjdplssq.com
    rvqoovmmoqptspi.org
    rvqoovmmoqptspi.com
    oqrivpkkeujnqrrq.biz
    oqrivpkkeujnqrrq.org
    lsurhmvpmzkhwp.net
    lsurhmvpmzkhwp.com
    qkqxtfwunoyogxkp.info
    qkqxtfwunoyogxkp.biz
    pjrvnrqspptzn.net
    pjrvnrqspptzn.org
    qrstrupvskriebvw.info
    qrstrupvskriebvw.com
    mkqpykkpqyuul.biz
    mkqpykkpqyuul.com
    gyrhkosqoisgkfn.info
    gyrhkosqoisgkfn.org
    txhohmpovjstukpi.net
    txhohmpovjstukpi.biz
  • Should it be a time dependent DGA?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant