URLhaus-PL-627cc90fa904cce1ef93c46100d9eefe326674263a4aeb95ceb61f3be5788c9d medium

Description

Malware family: Mirai. File type: elf. Size: 39,356 bytes. First seen: 2026-06-03 16:44:13.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• URLhaus payload page URLhaus
• Download sample (ZIP, password: infected) URLhaus

• Mirai Malware Analysis, Overview by ANY.RUN
  web:any.run

  Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.

  2026-05-21 03:16 UTC
• abuse.ch Threat Intelligence Real Time Feed - Spamhaus Technology
  web:docs.spamhaus.com

  abuse.ch Threat Intelligence Real Time Feed There are several real time feeds available from abuse.ch. Each feed is distributed through a different channel and exposes a different set of data. URLhaus The feed name is urlhaus . URLhaus is a project from abuse.ch with the goal of sharing malicious URLs that are being used for malware distribution. This real time feed provides notification ...

  2026-05-21 03:16 UTC
• Mirai (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices.

  2026-05-21 03:16 UTC
• URLhaus: Threat Intelligence & Malware URL Database
  web:mcpmarket.com

  URLhaus is a Model Context Protocol (MCP) server enabling access to the URLhaus database from abuse.ch, a project dedicated to collecting and sharing malicious URLs used in malware distribution. This server provides AI agents with the tools for in-depth threat intelligence research and cybersecurity analysis, allowing them to query and analyze malicious URLs, hosts, payloads , and related data ...

  2026-05-21 03:16 UTC
• Maltego Abuse.ch URLHaus Portal
  web:support.maltego.com

  URLHaus is a project operated by Abuse.ch to share intelligence on malicious URLs that are being used for malware distribution. The community-driven project collects, tracks, and shares malware URLs, helping network administrators and security analysts to protect their network and customers from cyber threats.

  2026-05-21 03:16 UTC
• URLhaus - techdocs.cyware.com
  web:techdocs.cyware.com

  URLhaus is a project operated by Abuse.ch to share intelligence on malicious URLs that are being used for malware distribution. In Orchestrate, URLhaus collects, tracks, and shares malware URLs, helping network administrators and security analysts to protect their network and customers from cyber threats. The URLhaus app is configured with the Orchestrate application to perform the following ...

  2026-05-21 03:16 UTC
• URLhaus | Malware URL exchange
  web:urlhaus.abuse.ch

  URLhaus URLhaus is a platform from abuse.ch and Spamhaus dedicated to sharing malicious URLs that are being used for malware distribution. Report URLs and explore the database for valuable intelligence. Use the APIs, to seamlessly push and pull signals, and automate bulk queries. With this intelligence, gain insights into malware behavior, to help identify, track, and mitigate against malware ...

  2026-05-21 03:16 UTC
• URLhaus | Browse - abuse.ch
  web:urlhaus.abuse.ch

  Here you can propose new malware urls or just browse the URLhaus database. If you are looking for a parsable list of the dataset, you might want to check out the URLhaus API.

  2026-05-21 03:16 UTC
• Mirai Payloads Found on German Server AS51396 - LinkedIn
  web:www.linkedin.com

  We received a submission from a contributor on the URLhaus platform today that caught our attention 🔎👀 A threat actor has uploaded multiple # Mirai payloads to a server hosted in AS51396 ...

  2026-05-21 03:16 UTC
• CSIRT-IE: Active Malware Distribution Sites
  web:www.ncsc.gov.ie

  CSIRT-IE monitors the URLhaus dataset for reports of sites, within its jurisdiction, that are reported to be actively distributing malware. Active Malware Distribution Sites The URLhaus platform only report sites (URLs) that are directly being used to distribute malware.

  2026-05-21 03:16 UTC

Only Available for Registered Users. Sign in to view.