End-to-End Analysis of a Domain Generating Algorithm Malware Family

Explore an in-depth analysis of a Domain Generating Algorithm (DGA) malware family in this 54-minute conference talk from Black Hat USA 2013. Delve into the comprehensive process of investigating this elusive malware, from binary deobfuscation to DGA analysis, sinkholing, domain registrant research, and ultimately attributing the malware to its author and accomplices. Gain insights into a malware family with thousands of active variants that has managed to evade detection by antivirus firms. Discover how this malware is connected to a long-running underground campaign active for at least six years. Learn about the challenges posed by DGAs in evading traditional domain blacklists, enabling fast-flux domain registration, and hindering analysts' ability to predict control servers.