Skip to content

Instantly share code, notes, and snippets.

@jedisct1
Last active December 12, 2015 04:08
Show Gist options
  • Select an option

  • Save jedisct1/4712240 to your computer and use it in GitHub Desktop.

Select an option

Save jedisct1/4712240 to your computer and use it in GitHub Desktop.
Win32/Redyms C&C domains
anzku-bqe.net
anzku-bqejnqs.net
anzkulb-ejn.net
anzkulb-ejnqsbj.net
boalvm-rfkor.net
boalvmcr-k.net
boalvmcr-kortc.net
cpbmw-dsg.net
cpbmw-dsglpsu.net
cpbmwnd-glp.net
cpbmwnd-glpsudl.net
dqcnxo-thmqt.net
dqcnxoet-m.net
dqcnxoet-mqtve.net
erdoy-fui.net
erdoy-fuinruw.net
erdoypf-inr.net
erdoypf-inruwfn.net
fsepzq-vjosv.net
fsepzqgv-o.net
fsepzqgv-osvxg.net
gtfqa-hwk.net
gtfqa-hwkptwy.net
gtfqarh-kpt.net
gtfqarh-kptwyhp.net
hugrbs-xlqux.net
hugrbsix-q.net
hugrbsix-quxzi.net
ivhsc-jym.net
ivhsc-jymrvya.net
ivhsctj-mrv.net
ivhsctj-mrvyajr.net
jwitdu-znswz.net
jwitdukz-s.net
jwitdukz-swzbk.net
kxjue-lao.net
kxjue-laotxac.net
kxjuevl-otx.net
kxjuevl-otxaclt.net
lykvfw-bpuyb.net
lykvfwmb-u.net
lykvfwmb-uybdm.net
mzlwg-ncq.net
mzlwg-ncqvzce.net
mzlwgxn-qvz.net
mzlwgxn-qvzcenv.net
namxhy-drwad.net
namxhyod-w.net
namxhyod-wadfo.net
obnyi-pes.net
obnyi-pesxbeg.net
obnyizp-sxb.net
obnyizp-sxbegpx.net
pcozja-ftycf.net
pcozjaqf-y.net
pcozjaqf-ycfhq.net
qdpak-rgu.net
qdpak-rguzdgi.net
qdpakbr-uzd.net
qdpakbr-uzdgirz.net
reqblc-hvaeh.net
reqblcsh-a.net
reqblcsh-aehjs.net
sfrcm-tiw.net
sfrcm-tiwbfik.net
sfrcmdt-wbf.net
sfrcmdt-wbfiktb.net
tgsdne-jxcgj.net
tgsdneuj-c.net
tgsdneuj-cgjlu.net
uhteo-vky.net
uhteo-vkydhkm.net
uhteofv-ydh.net
uhteofv-ydhkmvd.net
viufpg-lzeil.net
viufpgwl-e.net
viufpgwl-eilnw.net
wjvgq-xma.net
wjvgq-xmafjmo.net
wjvgqhx-afj.net
wjvgqhx-afjmoxf.net
xkwhri-nbgkn.net
xkwhriyn-g.net
xkwhriyn-gknpy.net
ylxis-zoc.net
ylxis-zochloq.net
ylxisjz-chl.net
ylxisjz-chloqzh.net
zmyjtk-pdimp.net
zmyjtkap-i.net
zmyjtkap-impra.net
@jedisct1
Copy link
Author

jedisct1 commented Feb 5, 2013

That's it. Initial state is 0x110. The cycle is very short.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment