MB-3b514eb5ea006f1d68df1792cc2221ecfb558cd59f41e6e8d6ebd7ea6433c00c
high
📛 Threat Title
Mirai: ypezhbfg.armv6l
Description
File type: elf. Size: 942876 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-24 08:08:49.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
3b514eb5ea006f1d68df1792cc2221ecfb558cd59f41e6e8d6ebd7ea6433c00c
IOC database
- Type
- hash_sha256
- Value
3b514eb5ea006f1d68df1792cc2221ecfb558cd59f41e6e8d6ebd7ea6433c00c- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
2dc13af9625f7f76cd5f706570977adef39895b0
IOC database
- Type
- hash_sha1
- Value
2dc13af9625f7f76cd5f706570977adef39895b0- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
66df2507c88ca13c25786cfd17887a15
IOC database
- Type
- hash_md5
- Value
66df2507c88ca13c25786cfd17887a15- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 942876 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-24 08:08:49.
Remediations (10)
-
web:cybersecuritynews.com
A newly disclosed Linux kernel flaw could let attackers escape ARM64 virtual machines and access the host system.
-
web:dailysecurityreview.com
A Mirai malware botnet is leveraging a zero-day vulnerability (CVE-2024-11120) in outdated GeoVision devices to deploy malware, potentially for DDoS attacks or cryptomining. Thousands of vulnerable devices are exposed online.
-
web:dailysecurityreview.com
A new Mirai botnet is using zero-day exploits to target industrial routers and smart home devices, launching high-intensity DDoS attacks. Learn about the vulnerabilities and how to protect your systems.
-
web:github.com
CVE-2026-31431 Mitigation Script This repository provides a temporary mitigation and revert script for CVE-2026-31431, a Linux kernel local privilege escalation vulnerability.
-
web:github.com
The duration between the public weaponization of an in-the-wild zero-day and the availability of tested, signed binary kernel packages from enterprise distributions (Ubuntu HWE, Debian, RHEL) typically spans 7 to 21 days. In production Kubernetes clusters, passively awaiting vendor packages exposes ...
-
web:securityarsenal.com
Ubuntu's USN-8726-3 patches CVE-2025-10263, an Arm TLB invalidation race in the Linux kernel that lets local attackers write to revoked memory and escalate privileges.
-
web:trainsec.net
Final Thoughts: A Call to Continuous Mastery Unpacking an ARM-based Mirai sample exemplifies the thrill and challenge of modern cybersecurity work. As IoT devices and Linux-based systems become more ubiquitous in enterprise networks, staying on top of evolving threats is essential. Take this as your motivation to keep refining your reverse engineering, malware analysis, and forensics ...
-
web:windowsforum.com
Microsoft's March cumulative update for Windows 11, KB5079473 (released March 10, 2026), is rolling out with a familiar mix of new features and security fixes — but a growing number of users now say the patch is also triggering severe instability on some machines, including hard freezes...
-
web:www.dell.com
Learn how to fix blue screen errors and unexpected restarts caused by the Dell SupportAssist Remediation or Alienware SupportAssist Remediation service.
-
web:www.yazoul.net
Mirai threat intelligence: 2400 samples tracked, 24 daily reports, IOCs, detection rates, and C2 infrastructure. Updated daily from MalwareBazaar.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.