Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

From VT: New seed of Tinba DGA? #9

Closed
suqitian opened this issue Sep 2, 2016 · 1 comment
Closed

From VT: New seed of Tinba DGA? #9

suqitian opened this issue Sep 2, 2016 · 1 comment

Comments

@suqitian
Copy link
Member

suqitian commented Sep 2, 2016

  • MD5:
    2acc3bfcde1bc81af00186d4ed977ffa
  • Link to VT
  • Today, 2016-09-02, run this sample in My VirtualBox, some domains were generated.
    bdttlsviqfkt.club
    bdttlsviqfkt.pw
    bdttlsviqfkt.us
    bdttlsviqfkt.xyz
    bggtbbxiffgp.club
    bggtbbxiffgp.pw
    bggtbbxiffgp.us
    bggtbbxiffgp.xyz
    bjxphhqqrinp.club
    bjxphhqqrinp.pw
    bjxphhqqrinp.us
    bjxphhqqrinp.xyz
    chebcidhgcpl.club
    chebcidhgcpl.pw
    chebcidhgcpl.us
    chebcidhgcpl.xyz
    crsxgyxxmmll.club
    crsxgyxxmmll.pw
    crsxgyxxmmll.us
    crsxgyxxmmll.xyz
    dl.client.baidu.com
    dns.msftncsi.com
    dr.sg.baidu.com
    dvvuhsqdvjpc.club
    dvvuhsqdvjpc.pw
    dvvuhsqdvjpc.us
    dvvuhsqdvjpc.xyz
    endlmnbkoufi.club
    endlmnbkoufi.pw
    endlmnbkoufi.us
    endlmnbkoufi.xyz
    jjqbsgoggkke.club
    jjqbsgoggkke.pw
    jjqbsgoggkke.us
    jjqbsgoggkke.xyz
    lddjnmfghink.club
    lddjnmfghink.pw
    lddjnmfghink.us
    lddjnmfghink.xyz
    mutmnffvyhsx.club
    mutmnffvyhsx.pw
    mutmnffvyhsx.us
    mutmnffvyhsx.xyz
    osogugfexsmt.club
    osogugfexsmt.pw
    osogugfexsmt.us
    osogugfexsmt.xyz
    pjwqxprfukmc.club
    pjwqxprfukmc.pw
    pjwqxprfukmc.us
    pjwqxprfukmc.xyz
    plbywowksonm.club
    plbywowksonm.pw
    plbywowksonm.us
    plbywowksonm.xyz
    pqddbjojlrhx.club
    pqddbjojlrhx.pw
    pqddbjojlrhx.us
    pqddbjojlrhx.xyz
    psbswldkklef.club
    psbswldkklef.pw
    psbswldkklef.us
    psbswldkklef.xyz
    ptvrghksijks.pw
    ptvrghksijks.xyz
    pxtttxbghkjq.club
    pxtttxbghkjq.pw
    pxtttxbghkjq.us
    pxtttxbghkjq.xyz
    qngxxpxswgow.club
    qngxxpxswgow.pw
    qngxxpxswgow.us
    qngxxpxswgow.xyz
    riwthpklxxqd.club
    riwthpklxxqd.pw
    riwthpklxxqd.us
    riwthpklxxqd.xyz
    srfihognsxyb.club
    srfihognsxyb.pw
    srfihognsxyb.us
    srfihognsxyb.xyz
    stat.client.baidu.com
    symvrqdogkip.club
    symvrqdogkip.pw
    symvrqdogkip.us
    symvrqdogkip.xyz
    vovgbbfedcfq.club
    vovgbbfedcfq.pw
    vovgbbfedcfq.us
    vovgbbfedcfq.xyz
    vvfjmngtiurc.club
    vvfjmngtiurc.pw
    vvfjmngtiurc.us
    vvfjmngtiurc.xyz
    vvgttdgppheb.club
    vvgttdgppheb.pw
    vvgttdgppheb.us
    vvgttdgppheb.xyz
    vwdetjbjrumu.club
    vwdetjbjrumu.pw
    vwdetjbjrumu.us
    vwdetjbjrumu.xyz
    whutnffnqeuu.club
    whutnffnqeuu.pw
    whutnffnqeuu.us
    whutnffnqeuu.xyz
    wpxlusttwnir.club
    wpxlusttwnir.pw
    wpxlusttwnir.us
    wpxlusttwnir.xyz
    wueiqltsgqns.club
    wueiqltsgqns.pw
    wueiqltsgqns.us
    wueiqltsgqns.xyz
    yyrlwvervfhl.club
    yyrlwvervfhl.pw
    yyrlwvervfhl.us
    yyrlwvervfhl.xyz
  • Regex Results from DGArchive show these domains could belong to the DGA of Tinba.
@suqitian
Copy link
Member Author

suqitian commented Sep 2, 2016

It is a new seed of Tinba.

Seed: "EalnxZO2WZOmiGY2"
Domain: "australiaonline.club"
TLDs: ['pw', 'xyz', 'us', 'club']

The number of domains: 200

A implementation of DGA in Python is here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant