Resolved n18b7273u1j.in to 188.8.131.52
Gate file: /M_jsh1/order.php
This is betabot version 1.5. This is the second betabot 1.5 botnet I have found, but the other one was just a different path on an already posted botnet, so it wasn’t worth a new post.
You may note that the domains used are only a day old.
Hosting infos: http://whois.domaintools.com/184.108.40.206
Related md5s (Search on Malwr.com to download samples)