Malware Packet Capture Comparison - Windows Malware 

Comparison of DNS resolutions of the same Malware from Packet captures of SecneurX and VirusTotal.

SecneurX

DNS Resolutions

• whatismyipaddress.com

• whatsmyip.net

• urler.us

• pyatsotok.ru

• oprosonlinecorp.ru

• dc-optimal.ru

• besuvprook.live

• duniakaryadi.blogspot.com

• duniakaryadi.blogspot.co.id

• fairfieldwaterfront.com

• phonecardscatalogue.com

• mksmotors.ru

• torva.ru

• brandprotection.com.tw

• kinoji.ru

• micssoft.ru

• mouche.hu

• rosemaryskatepunk.com

• zogf.tw

• www.zogf.tw

• thizojxx.men

• robottraining.com

• orodiargan.com

• 24diploma.ru

• coagent.cn

• yurday.ru

• hydreq.com

• rivalo89.com

• vbanke24.ru

VirusTotal

DNS Resolutions

• whatismyipaddress.com

• whatsmyip.net

​

Source:   https://www.virustotal.com/#/file/0f89319808de73cf915ad7e8cd9a8854c1a66f8798476a2deab282006ca7068d/behavior​