24E1tRfQaf31.in (Betabot http botnet hosted by ecatel.net)

Resolved 24e1trfqaf31.in to 94.102.49.76

Server:  24e1trfqaf31.in
Gate file:  /Kuod_9381a/order.php

Alternate domains:
24ttgaezrtawae.in
13893ygh1uvbad.in
ibfuo2t1g1qdewr3.in (Currently suspended)

The WHOIS info for this domain is pretty interesting. Looks like someone copied the WHOIS info of a major hackforums scammer.

Hosting infos: http://whois.domaintools.com/94.102.49.76

Related md5s (Download samples from Malwr.com)
Betabot: b47a148b57ce6a7e6e57b039315c77d4