MCPcopy Index your code
hub / github.com/baderj/domain_generation_algorithms

github.com/baderj/domain_generation_algorithms @v1.0.0

Chat with this repo
repository ↗ · DeepWiki ↗ · release v1.0.0 ↗ · + Follow
110 symbols 322 edges 42 files 0 documented · 0%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

Domain Generation Algorithms

Johannes Bacher's reversing efforts

Overview

Subfolder Malware Family Alias Write-Up
pizd ?? [link] (https://blog.avast.com/2013/06/18/your-facebook-connection-is-now-secured/)
newgoz newGOZ Gameover Zeus, Peer-to-Peer Zeus link
ramnit Ramnit link
shiotob Shiotob Urlzone, Bebloh link
symmi Symmni link
banjori Banjori MultiBanker 2, BankPatch(er) link
necurs Necurs link
dircrypt DirCrypt link
pykspa/precursor Precursor of Pykspa link
pkyspa/improved Improved Pykspa link
simda Simda Shiz link
tinba Tinba TinyBanker, Zusy link
ranbyus/may Ranbyus Version 1 link
ranbyus/september Ranbyus Version 2 link
nymaim Nymaim
murofet/v1 Murofet Variant 1 LICAT link
murofet/v2 Murofet Variant 2 LICAT link
murofet/v3 Murofet Variant 3 LICAT link
fobber Fobber Tinba v3
corebot CoreBot link
suppobox SuppoBox link
unnamed_javascript_dga Unnamed link Obsolete, see Proslikefan
kraken/v1 Kraken Version 1 Bobax, Oderoor link
kraken/v2 Kraken Version 2 Bobax, Oderoor link
dnschanger DNSChanger Alureon link
qakbot Qakbot link
locky Locky link
padcrypt Padcrypt link
gozi Gozi Ursnif, Snifula, Papras link
qadars Qadars link
sisron Sisron TOMB, Win32/Agent.WRQ, Trojan.Scar link
proslikefan Proslikefan link
vawtrak Vawtrak link
unnamed_downloader Unnamed Downloader
chinad Chinad link
tempedreve Tempedreve link
unknown_malware ?

Core symbols most depended-on inside this repo

pseudo_random
called by 7
necurs/dga.py
pseudo_random
called by 7
necurs/dga_different_params.py
ror32
called by 7
locky/dgav2.py
ror32
called by 7
locky/dgav3.py
prng
called by 4
vawtrak/dga3.py
prng
called by 4
vawtrak/dga2.py
rand
called by 4
gozi/dga.py
map_to_lowercase_letter
called by 4
banjori/dga.py

Shape

Function 82
Method 20
Class 8

Languages

Python98%
C2%

Modules by API surface

qakbot/dga.py8 symbols
symmi/dga.py6 symbols
dnschanger/dga.py6 symbols
gozi/dga.py5 symbols
vawtrak/dga.py4 symbols
unknown_malware/dga.py4 symbols
tempedreve/dga.py4 symbols
ramnit/dga.py4 symbols
nymaim/dga.py4 symbols
newgoz/dga.py4 symbols
kraken/v2/dga_v2.py4 symbols
kraken/v1/dga_v1.py4 symbols

For agents

$ claude mcp add domain_generation_algorithms \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact

Ask about this repo answers extend the page