MB-d011b612bea1fd0f2c0ebc85b31fe32e7402727156a8bde880d74f2b3ba0f1e2
high
📛 Threat Title
Mirai: boatnet.m68k
Description
File type: elf. Size: 84608 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-08-04 21:15:51.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
d011b612bea1fd0f2c0ebc85b31fe32e7402727156a8bde880d74f2b3ba0f1e2
IOC database
- Type
- hash_sha256
- Value
d011b612bea1fd0f2c0ebc85b31fe32e7402727156a8bde880d74f2b3ba0f1e2- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
162d53193df33a47a1cec4bff7b921f8
IOC database
- Type
- hash_md5
- Value
162d53193df33a47a1cec4bff7b921f8- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
de2dcf72ceeedf8032dde1cb70fb02181b77e516
IOC database
- Type
- hash_sha1
- Value
de2dcf72ceeedf8032dde1cb70fb02181b77e516- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 84608 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-08-04 21:15:51.
Remediations (10)
-
web:app.any.run
Access all analysis results in seconds: A new Tier 1 report, AI Summary, IOCs, MalConf, ATT&CK matrix, and more for faster triage & response.
-
web:foresiet.com
The Mirai botnet has resurged. Learn about the Jackskid variant, its 40,000+ active bots, and the critical IoT Threats.
-
web:gbhackers.com
This effectively turns a defensive system feature into an anti- remediation tool. Tengu Mirai Botnet Uses Watchdog Further complicating incident response, Tengu implements "binary bricking" by overwriting critical system binaries associated with reboot and shutdown operations using malformed ELF headers.
-
web:github.com
Contribute to bfeeney6/ Mirai -Botnet- Mitigation - development by creating an account on GitHub.
-
web:tria.ge
Check this mirai report boatnet[.]m68k[.]elf, with a score of 10 out of 10.
-
web:tria.ge
Check this mirai report boatnet[.]m68k , with a score of 10 out of 10.
-
web:www.joesandbox.com
Antivirus / Scanner detection for submitted sample Multi AV Scanner detection for submitted file Yara detected Mirai boatnet.m68k.elf started xfce4-panel wrapper-2.0 started
-
web:www.joesandbox.com
Signatures Antivirus / Scanner detection for submitted sample Malicious sample detected (through community Yara rule) Multi AV Scanner detection for submitted file Yara detected Mirai Sample tries to kill multiple processes (SIGKILL) Creates hidden files and/or directories Detected TCP or UDP traffic on non-standard ports Enumerates processes within the "proc" file system Executes the "rm ...
-
web:www.netscout.com
Arbor Networks - DDoS Experts ASERT Threat Summary: Aisuru and Related TurboMirai Botnet DDoS Attack Mitigation and Suppression—October 2025—v1.0
-
web:www.techtimes.com
Tengu botnet, a newly disclosed Mirai variant, weaponizes the hardware watchdog timer in routers and IP cameras to force a reboot when a responder kills the process — erasing forensic evidence ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.