URLhaus-PL-be27d319f75643466bcfdbbfbd522616cd38771102dcd7af6bfe7a1b088228c6 medium

Description

Malware family: Mirai. File type: elf. Size: 114,576 bytes. First seen: 2026-06-03 16:43:17.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Download sample (ZIP, password: infected) URLhaus
• URLhaus payload page URLhaus

• abuse.ch Threat Intelligence Real Time Feed - Spamhaus Technology
  web:docs.spamhaus.com

  A payload gets observed in combination with a URL tracked by URLhaus ; The information on a payload changes for a URL tracked by URLhaus (e.g. malware family associated with a payload ).

  2026-05-21 03:15 UTC
• Mirai (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices.

  2026-05-21 03:15 UTC
• URLhaus: Threat Intelligence & Malware URL Database
  web:mcpmarket.com

  URLhaus is a Model Context Protocol (MCP) server enabling access to the URLhaus database from abuse.ch, a project dedicated to collecting and sharing malicious URLs used in malware distribution. This server provides AI agents with the tools for in-depth threat intelligence research and cybersecurity analysis, allowing them to query and analyze malicious URLs, hosts, payloads , and related data ...

  2026-05-21 03:15 UTC
• URLhaus | Malware URL exchange
  web:urlhaus.abuse.ch

  URLhaus URLhaus is a platform from abuse.ch and Spamhaus dedicated to sharing malicious URLs that are being used for malware distribution. Report URLs and explore the database for valuable intelligence. Use the APIs, to seamlessly push and pull signals, and automate bulk queries. With this intelligence, gain insights into malware behavior, to help identify, track, and mitigate against malware ...

  2026-05-21 03:15 UTC
• URLhaus | Browse - abuse.ch
  web:urlhaus.abuse.ch

  Here you can propose new malware urls or just browse the URLhaus database. If you are looking for a parsable list of the dataset, you might want to check out the URLhaus API.

  2026-05-21 03:15 UTC
• URLhaus | Mirai
  web:urlhaus.abuse.ch

  URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as Mirai .

  2026-05-21 03:15 UTC
• Mirai Payloads Found on German Server AS51396 - LinkedIn
  web:www.linkedin.com

  We received a submission from a contributor on the URLhaus platform today that caught our attention 🔎👀 A threat actor has uploaded multiple # Mirai payloads to a server hosted in AS51396 ...

  2026-05-21 03:15 UTC
• Abuse.ch URLhaus - maltego.com
  web:www.maltego.com

  The Abuse.ch URLhaus Transforms for Maltego enable cybersecurity analysts to identify malicious URLs and explore underlying malware activity.

  2026-05-21 03:15 UTC
• CSIRT-IE: Active Malware Distribution Sites
  web:www.ncsc.gov.ie

  The URLhaus platform only report sites (URLs) that are directly being used to distribute malware. This means that the malware distribution site are currently serving a payload . A payload can be any file, such as an executable, a script or a document that can infect or harm a computer once downloaded and executed.

  2026-05-21 03:15 UTC
• Malware Digest Mar 2023 | Stats for URLs, IOCs & malware from abuse.ch
  web:www.spamhaus.org

  Malware Digest March 2023 Together, Emotet and Qakbot were responsible for 38% of ALL malware sites shared on URLhaus , Mirai had the biggest growth across the board, and there are officially over 1 million IOCs shared on ThreatFox. Find the report here:

  2026-05-21 03:15 UTC

Only Available for Registered Users. Sign in to view.