MITRE ATT&CKsub-technique

T1637.001 Domain Generation Algorithms

Published 2022-04-05 Modified 2025-10-24 Official page ↗
Domain
mobile
Tactics
Command And Control
Platforms
Android, iOS
Version
1.1
Created
2022-04-05

Description

Adversaries may use Domain Generation Algorithms (DGAs) to procedurally generate domain names for uses such as command and control communication or malicious application distribution. DGAs increase the difficulty for defenders to block, track, or take over the command and control channel, as there could potentially be thousands of domains that malware can check for instructions.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1637 Dynamic Resolution technique

Tactic · MITRE ATT&CK (1)

  • TA0037 Command and Control tactic

Referenced by MITRE ATT&CK · uses (4)

  • S1067 FluBot software (malware)
  • S1055 SharkBot software (malware)
  • S0485 Mandrake software (malware)
  • S0411 Rotexy software (malware)

References