MalwareBazaar Database

This page shows some basic information the YARA rule deepfield_boatnet_botnet including corresponding malware samples.

Database Entry


YARA Rule:deepfield_boatnet_botnet
Author:Nokia Deepfield ERT
Description:Boatnet Linux DDoS bot with bundled XMRig miner - Polygon contract dead-drop, AES-128-GCM C2 list
Firstseen:2026-09-29 05:03:21 UTC
Lastseen:2026-11-09 12:40:57 UTC
Sightings:71

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter