Code Monkey home page Code Monkey logo

cmnatic / cryptolocker-dga Goto Github PK

View Code? Open in Web Editor NEW

This project forked from azrilrahim/cryptolocker-dga

0.0 1.0 0.0 10 KB

this is Crytolocket Malware Domain Generation Algorithm (DGA). Cryptolocker uses DGA to generate 1000 to 10000 unique domain names for its bots or C&C per day. This cmd line contains reverse engineered seed from GoZ and should be able to generate the same DGA results. This code is a part of my research on Cyber Threat Intelligence. GNU open source. Feel free to edit as long credits are due.

QMake 5.96% C++ 94.04%

cryptolocker-dga's Introduction

#-----------------------------------#
#                                   #
# Copyright (C) 2016 Azril Rahim    #
#                                   #
# [email protected]               #
#                                   #
#-----------------------------------#

INTRODUCTION
=============
CRYPTODGA is Qt C/C++ implementation to generate CryptoLocker (CRYPTO)
Malware possible Command Center (C2) domain name based on
Domain Generated algorithm. The codes is taking the reversed engineer
SEED value from its family codes

The codes should produced significant possible results to
immediate variants of CRYPTO family Malware.

CRYPTODGA is generated against date input. CRYPTODGA generates about
10000 domain per day. Using cryptodga, a specific domains list can
be produced on targeted date.


REQUIREMENT
-------------
TIG is a cross platform application that runs on MAC, WIN32/64, UNIX,
OS2 and LINUX. It is a C/C++ application that is coded entirely on
C++ Qt framework. For 64bit compatiblity, all compiliation for TIG
requires the following minimum specifications library to be installed

    *Qt 5.4 (https://www.qt.io/download-open-source/)


INSTALLATION
-------------

    Compilation
    -----------
    1.  Please ensure all the dependencies libraries specified in the
        requirement sections are properly installed

    2.  Extract all the files in the desired working directory.
        e.g: /home/user/project/CRYPTODGA

    3.  The create a proper make file for compilation, you need to access
        to the qmake command that comes with Qt framework. qmake command
        must be issued inside the CRYPTODGA work directory.

        %> cd /home/user/project/CRYPTODGA
        %> /<qt install dir>/bin/qmake

    4.  After the qmake process is finish, you can called the make command
        to complete the compilation

        %> cd /home/user/project/CRYPTODGA
        %> make

    5. After a successful compilation, a TIG file will be created.
       To invoke CRYPTODGA application:

        %> cd /home/user/project/CRYPTODGA
        %> ./cryptodga


COMMAND LINE ARGUMENTS
----------------------
    n=: number of domain to be generated (e.g 1000)
    f=: output filename if the result need to be write to a file
    d=: past, present or future date that DGA to be generated
        format: DD-MM-YYYY


EXAMPLE
-------------
    1.  Display result on screen
        %> ./gozdga n=1000 d=12-04-2016

    2.  Save result on a file
        %> ./gozdga n=1000 d=12-04-2016 f=./result.txt



OUTPUT
-------
The output will be a single domain per line
    e.g
    gdgdhdddjkdgh.com
    jdyeeje7653dfg.net
    ...
    ...



MAINTAINER
----------
* Azril Rahim <[email protected]>

cryptolocker-dga's People

Contributors

azrilrahim avatar

Watchers

 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.