360netlab / DGA

Suspicious DGA from PDNS and Sandbox.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

From VT: A new seed of Dircrypt?

suqitian opened this issue · comments

  • MD5
    8dce388365ba4ddd516a744c677d41e9
  • Domains
    aecsztodxcauezvwv.com
    agqkgrttm.com
    dkpcztxjhlmgppzrd.com
    erajimtnghuqfdgnhj.com
    ftxtknedryvgywsmchm.com
    gcaocxscewiemvhggl.com
    gxcmyvpmuuxoluzdenhr.com
    hbyxpqjkm.com
    hrbkzpoytss.com
    injhsmedkkvjktwgmz.com
    iufmmhtfuglkewvyrira.com
    jzyskusvwwpnykoi.com
    khtpzsuzpbaforbsqoqt.com
    lvbikxjfrzrofxzn.com
    ngntxyqih.com
    ntaeqknhxehkadis.com
    pbxfdvizihgcv.com
    qmeuxytpxbf.com
    xbrsttwgaomaxapjpa.com
    zwmobkxpbcwddexzh.com
  • Details in VT
    File has been identified by at least ten Antiviruses on VirusTotal as malicious, and one of the keywords is "Dircrypt".

This is indeed DirCrypt with Seed 0xF6A84A56 and 50 generated domains . Here is the full list

roxgaffvgdoussasodp.com
fmmpcvptedjj.com
kcioltyxt.com
uoneiidbgd.com
cgisutadrreeofer.com
cdvdzllc.com
qmiovfqxfottkhvxnbh.com
cosehduitwhveyawpvb.com
rstjohxvafpdil.com
ktnpeigebccttk.com
owhcvpphjlhmmhsu.com
hsysmmsyrqigvk.com
xiwizgqqxsxiufcqog.com
bbtflrghufwutxujka.com
srivztiulphfxd.com
poinakvh.com
yjghnpukyqy.com
zjnzfctktonlspuanzlr.com
qszjxjem.com
iedzvuyxzihzdwccayx.com
gznvxlfppo.com
adhwcthf.com
halmafqsuibsddqls.com
ppwktofoh.com
evbjhfhddsqejovzfjx.com
eugrbfjvkzx.com
pmuyficrjmtartnzeouj.com
vfcnugadnuhaoebzwaq.com
khcagvgdllhfjqn.com
siamgggtevghgi.com
erajimtnghuqfdgnhj.com
iufmmhtfuglkewvyrira.com
injhsmedkkvjktwgmz.com
ntaeqknhxehkadis.com
ngntxyqih.com
jzyskusvwwpnykoi.com
khtpzsuzpbaforbsqoqt.com
dkpcztxjhlmgppzrd.com
xbrsttwgaomaxapjpa.com
lvbikxjfrzrofxzn.com
hbyxpqjkm.com
ftxtknedryvgywsmchm.com
pbxfdvizihgcv.com
hrbkzpoytss.com
gcaocxscewiemvhggl.com
aecsztodxcauezvwv.com
agqkgrttm.com
qmeuxytpxbf.com
gxcmyvpmuuxoluzdenhr.com
zwmobkxpbcwddexzh.com

Thanks a lot.
The seed has been added to our Opendata!