MalwareBazaar Database

This page shows some basic information the YARA rule cecilio_botnet including corresponding malware samples.

Database Entry


YARA Rule:cecilio_botnet
Author:Nokia Deepfield ERT
Description:Cecilio botnet - CatDDoS derivative with modified RC4 table encryption
Firstseen:2026-03-13 05:14:11 UTC
Lastseen:2026-03-18 09:07:51 UTC
Sightings:23

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter