the sky daddy

javatube.net (Betabot http botnet hosted by ecatel.net)

Resolved javatube.net to 94.102.51.123 Server:  javatube.net Gate file:  /singers/song/singles.php Alternate domains: menbbs.netthepremiumsellers.comjuxtaposewhereami.no-ip.biz Hosting infos: http://whois.domaintools.com/94.102.51.123 Related md5s (Download samples from Malwr.com Betabot: 319fe02b18bd75e529bccc317712ad10

spamtheinter.net (Pony loader hosted by ecatel.net)

Resolved spamtheinter.net to 94.102.51.123 Server: spamtheinter.net Gate file:  /pony/gate.php Hosting infos: http://whois.domaintools.com/94.102.51.123 Related md5 (Download sample from Malwr.com) Pony: ab5c96e927c863a773271347a5713486

sentryme.com (Betabot http botnet hosted by ecatel.net)

Resolved sentryme.com to 94.102.51.123 Server:  Sentryme.com Gate file:  /order.php Altnerate domain: stayattentive.com Bitcoin mining info: -a sha256 -o stratum+tcp://162.243.6.88:3333 -u Ghettoweed.R -p x -g no -t 4 -a sha256 -o stratum+tcp://162.243.6.88:3333 -u Ghettoweed.R -p x -t 0 -I 10 The username string in the binary is the sky daddy_v1$, which corresponds to this Hackforums account.