Domain Generation Algorithm

GPTKB entity

Predicate	Object
gptkbp:instanceOf	malware technique
gptkbp:abbreviation	gptkb:DGA
gptkbp:category	cybersecurity malware botnet
gptkbp:countermeasures	blacklisting DNS monitoring domain sinkholing machine learning detection
gptkbp:detectionDifficulty	high
https://www.w3.org/2000/01/rdf-schema#label	Domain Generation Algorithm
gptkbp:input	gptkb:time_zone seed value random number
gptkbp:intendedUse	avoid static blacklists dynamic C2 infrastructure increase persistence resilience against domain takedown
gptkbp:introducedIn	2008
gptkbp:language	gptkb:Python gptkb:assembly_language gptkb:C++ C
gptkbp:output	Domain list of domains
gptkbp:purpose	evade detection generate domain names
gptkbp:relatedTo	malware command and control botnet domain flux fast flux
gptkbp:usedBy	gptkb:Bamital gptkb:Bebloh gptkb:Conficker gptkb:Corebot gptkb:Dridex gptkb:Dyre gptkb:Gameover_Zeus gptkb:Gozi gptkb:Locky gptkb:Matsnu gptkb:Necurs gptkb:Pushdo gptkb:Ramnit gptkb:Rovnix gptkb:Sality gptkb:Shiz gptkb:Simda gptkb:Tinba gptkb:Ursnif gptkb:Virut gptkb:Zeus gptkb:Emotet gptkb:QakBot gptkb:Andromeda gptkb:TrickBot gptkb:Shifu malware Murofet Suppobox
gptkbp:usedFor	command and control communication
gptkbp:bfsParent	gptkb:DGA
gptkbp:bfsLayer	5