MalwareBazaar Database

This page shows some basic information the YARA rule deepfield_drifter_ddos_botnet including corresponding malware samples.

Database Entry


YARA Rule:deepfield_drifter_ddos_botnet
Author:Nokia Deepfield ERT
Description:Drifter DDoS botnet - native bot binary (ARM/MIPS/x86, incl. deepfield.so)
Firstseen:2026-11-13 22:45:16 UTC
Lastseen:never
Sightings:1

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter