Everybody loves a big DNS query!
ESET Protection Suite ESET Protection Suite Sandbox: execFile · Timeout: 30s
network.exfiltration.dns examples:
Everybody loves a big DNS query!
Various modules of ESET protection suite (Antispam, Parental Controls, LiveGrid) perform odd DNS lookups to subdomains of e5.sk domain.
Example:
TXT? oa5jhh3yxkgu5kpwgnjmgk54pubqeaqbaeaq.a.e.e5.sk.
TXT? wzxh7gqaszmunhqg3g5ouiiuwebqeaqbaeaq.a.e.e5.sk.
TXT? xegjkvpuklfebhejqeve4mltsmbqeaqbaeaq.a.e.e5.sk.
TXT? vscxkxbn55aelaru6a6y3dxznebqeaqbaeaq.a.e.e5.sk.
TXT? dc5wtaihc6luvphgub6laccokebqeaqbaeaq.a.e.e5.sk.
Contributed by Petr Špaček (@pspacek)