Eric.freyssinet: Created page with "{{Publication |Botnet=Symmi, |Feature=Domain generation algorithm, |Year=2015 |Date=2015-01-21 |Editor=Johannes Bader |Link=http://www.johannesbader.ch/2015/01/the-dga-of-symm..."

2015-08-12T15:45:34Z

Created page with "{{Publication |Botnet=Symmi, |Feature=Domain generation algorithm, |Year=2015 |Date=2015-01-21 |Editor=Johannes Bader |Link=http://www.johannesbader.ch/2015/01/the-dga-of-symm..."

New page

{{Publication
|Botnet=Symmi,
|Feature=Domain generation algorithm,
|Year=2015
|Date=2015-01-21
|Editor=Johannes Bader
|Link=http://www.johannesbader.ch/2015/01/the-dga-of-symmi/
|Author=Johannes Bader,
|Type=Blogpost
|Abstract=Looking through the most recent reports on malwr.com, a sample sparked my interest because it suits my current interest in domain generation algorithms (DGA). Virus scanners label the sample as Symmi, other names for the same or similar malware family are MewsSpy and Graftor. The sample is very noisy. It tries to resolve many domains in a short period of time — only limited by the response time of the DNS server.
}}

The DGA of Symmi - Revision history

Eric.freyssinet: Created page with "{{Publication |Botnet=Symmi, |Feature=Domain generation algorithm, |Year=2015 |Date=2015-01-21 |Editor=Johannes Bader |Link=http://www.johannesbader.ch/2015/01/the-dga-of-symm..."