360netlab/DGA

From VT: A length of 5-14, a-z. tlds: ['cc', 'cx', 'mp', 'museum', 'nu', 'ph', 'pw', 'tk', 'tv', 'ws']

suqitian opened this issue · 1 comments

  • MD5
    896d8c518470635f058139ece63b34b1
  • Domains:
    bsxhrdaqpadhw.ph
    cavsftjttyegx.ph
    cebsdnm.ph
    clswrmzviuhy.tv
    crzhpdbeovb.mp
    dlkhzl.ph
    dsuzm.tv
    ekyisucvkdu.nu
    fpcaekbpy.nu
    gopprodymo.ph
    hbngloeusaaud.tk
    hdnthoafgeun.cc
    hqikqw.ws
    hxmwhn.pw
    jhbzeenwufvm.tk
    jyhvkibuije.tv
    ktsrw.ws
    lpelywltlfk.pw
    nckqhrmyqseh.ws
    nkllesg.ph
    nnlkogw.pw
    nwkeqbbw.museum
    ooecuz.ws
    pdkfbxedem.tv
    pvgsxfcrapzbke.ph
    quozsund.mp
    rfbpfcvbzwh.mp
    rpoeq.nu
    rpvthjjwtakt.nu
    rybeuvrbhy.mp
    rzafwgompiei.ph
    toxnaimlaql.mp
    uojdyg.mp
    uwcfsbubbn.pw
    vkczrtmvgyy.tv
    vmpqla.pw
    wgttayutl.tk
    wwdnnznktvbyc.cx
    xcbpsxh.mp
    xcptikslxtv.tv
    xeoaxmdg.cc
    xqfuwcxsssgwaq.ph
    ycusmgky.cx
    zajxq.nu
  • Today, try to run the file in Cuckoo and VirtualBox again, but only one different domain was generated each time

Other seeds:
98eed1c0590147933382e12661630524
a7ac6d068b7e23c4e9a0e04e6d154867