360netlab / DGA

Suspicious DGA from PDNS and Sandbox.

360netlab/DGA Issues

Qsnatch DGA
Updated 3 years ago1
From PDNS: length: 12~18, TLD: com
Updated 3 years ago
请问根据什么编写的py文件
Updated 3 years ago2
"2019-01-31 : +1 new seed of Ranbyus. " 这个新的种子是多少呢
Closed 4 years ago2
The DGA of Bigviktor
Updated 4 years ago
From sandbox: some APK samples that may have DGA
Updated 5 years ago4
The DGA of Enviserv
Updated 5 years ago1
From PDNS: A fix length 16, a-y. tld: [net]
Updated 5 years ago
From 360TI: A new version of Shiotob
Updated 5 years ago
Benign DGA of TeleRU
Updated 5 years ago1
From sandbox: The DGA of MyDoom
Updated 5 years ago3
From VT： A length of 10-15, a-z. tlds: [com], unpredictable DGA
Updated 5 years ago1
From PDNS: A fix length of 16, hexadecimal notation, tlds:[com]
Updated 6 years ago2
From PDNS: A fix length of 22, tlds:[in, ru, su]
Updated 6 years ago5
From PDNS: A fix length of 40, hexadecimal notation, tlds:[com, net, org]
Updated 6 years ago1
From sandbox: A fix length of 10, hexadecimal notation, tlds:[pw]
Updated 6 years ago
From VT: A new seed of Dircrypt?
Updated 6 years ago2
From PDNS: A fix length of 16, hexadecimal notation, prefixed with www, tlds:[club, com, info, xyz]
Updated 6 years ago1
From VT：2 new seeds of Murofet
Updated 6 years ago2
From PDNS: A length of 12-18, mix a-z and 0-9, tlds: [com]
Updated 6 years ago
From PDNS: A fix length of 13, tlds:[club, com, info, me, net, vip]
Updated 6 years ago2
From PDNS: Another fix length of 7, a-z. tlds: [ru, com]
Updated 6 years ago8
From VT: 3 new seeds of Banjori
Updated 7 years ago2
From sandbox: The DGA of XshellGhost
Updated 7 years ago1
From sandbox: A fix length of 16, tlds: [onion.to, onion.link, onion.cab, onion.nu]
Updated 7 years ago1
From PDNS: A fix length of 7, a-z. tlds: [ru, com]
Updated 7 years ago1
From Sandbox: New seed of Padcrypt
Updated 7 years ago1
Benign DGA from TcpRoute2
Updated 7 years ago
Random domains from Chrome
Updated 7 years ago
From VT: The DGA of FakeAV
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the fourth new seed of FakeAV?
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the third new seed of FakeAV?
Closed 7 years ago3
From VT: A length of 8-14, a-z, tld:[com].
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the seventh new seed of FakeAV?
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the sixth new seed of FakeAV?
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the fifth new seed of FakeAV?
Closed 7 years ago3
From VT: A length of 9-14, a-z, tlds: [com], the second new seed of FakeAV.
Closed 7 years ago3
A new seed of Banjori.
Closed 7 years ago1
Suppobox use new TLDs: [ru, net]
Closed 7 years ago1
A new seed of Murofet
Closed 7 years ago1
The DGA of Vidro
Closed 7 years ago1
From VT: A new seed of Tinba?
Closed 8 years ago1
From 360 Sandbox: A fix length of 12, a-x, tlds: [com, in, net, ru]. Looks like a new seed of Tinba.
Closed 8 years ago1
From VT: A new seed of Banjori.
Closed 8 years ago1
From 360 Sandbox: A new seed of Ranbyus
Closed 8 years ago1
From VT: Another key of Murofet V2?
Closed 8 years ago1
From VT: A new key of Murofet V2?
Closed 8 years ago3
From VT: Only change the first 6 characters of given domain, similiar to Banjor
Updated 8 years ago
From VT: A new time independent DGA?
Updated 8 years ago
From VT: A length of 5-14, a-z. tlds: ['cc', 'cx', 'mp', 'museum', 'nu', 'ph', 'pw', 'tk', 'tv', 'ws']
Updated 8 years ago1