n18b7273u1j.in (Betabot http botnet hosted by worldstream.nl)

Resolved n18b7273u1j.in to 217.23.3.102

Server:  n18b7273u1j.in
Gate file:  /M_jsh1/order.php

Alternate domains:
b19jdn167t.in

This is betabot version 1.5. This is the second betabot 1.5 botnet I have found, but the other one was just a different path on an already posted botnet, so it wasn’t worth a new post.
You may note that the domains used are only a day old.

Hosting infos: http://whois.domaintools.com/217.23.3.102

Related md5s (Search on Malwr.com to download samples)
Betabot: e2dfeedddcad222a0edb6e4a9b5205a4

2 Comments