MB-7e4305511096a82e490814cda89bc4b88b62152e0c23922eba86d382227d7e51 high

Description

File type: elf. Size: 626922 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 05:59:40.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 626922 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 05:59:40.

• Mirai Malware Analysis, Overview by ANY.RUN
  web:any.run

  Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.

  2026-09-25 09:59 UTC
• Malware analysis armv5l Malicious activity - any.run
  web:any.run

  Online sandbox report for armv5l, tagged as auto, mirai , botnet, verdict: Malicious activity

  2026-09-25 09:59 UTC
• Mirai Malware Spreads Via GeoVision Zero-Day Exploit
  web:dailysecurityreview.com

  A Mirai malware botnet is leveraging a zero-day vulnerability (CVE-2024-11120) in outdated GeoVision devices to deploy malware, potentially for DDoS attacks or cryptomining. Thousands of vulnerable devices are exposed online.

  2026-09-25 09:59 UTC
• Installation Guide | lion001am/Condi-Mirai | DeepWiki
  web:deepwiki.com

  Installation Guide Relevant source files Purpose and Scope This guide provides comprehensive instructions for setting up the Condi- Mirai botnet environment, including system dependencies, cross-compiler installation, database configuration, and service execution. This document covers the complete initial setup process needed to get the Condi- Mirai botnet operational. System Requirements The ...

  2026-09-25 09:59 UTC
• Mirai Source Code - GitHub
  web:github.com

  Mirai is a malware botnet that infects Internet of Things (IoT) devices using default or weak login credentials. Once infected, these devices are controlled by a command-and-control (CnC) server and can be used to launch DDoS attacks. This repo is a fork of the original leaked source code and includes components such as: The bot (runs on IoT devices) The CnC server The loader (infects devices ...

  2026-09-25 09:59 UTC
• GitHub - malol01/cross-compiler-for-mirai-archive · GitHub
  web:github.com

  Contribute to malol01/cross-compiler-for- mirai -archive development by creating an account on GitHub.

  2026-09-25 09:59 UTC
• Mirai Botnet | ARM Reverse Engineering Walkthrough
  web:trainsec.net

  Final Thoughts: A Call to Continuous Mastery Unpacking an ARM-based Mirai sample exemplifies the thrill and challenge of modern cybersecurity work. As IoT devices and Linux-based systems become more ubiquitous in enterprise networks, staying on top of evolving threats is essential. Take this as your motivation to keep refining your reverse engineering, malware analysis, and forensics ...

  2026-09-25 09:59 UTC
• Linux Analysis Report armv5l.elf - Joe Sandbox
  web:www.joesandbox.com

  Signatures Yara detected Mirai Sample is packed with UPX ELF contains segments with high entropy indicating compressed/encrypted content Executes the "rm" command used to delete files or directories Sample contains only a LOAD segment without any section mappings Uses the "uname" system call to query kernel version information (possible evasion)

  2026-09-25 09:59 UTC
• Automated Malware Analysis Report for armv5l.elf - Joe Sandbox
  web:www.joesandbox.com

  Signatures Antivirus / Scanner detection for submitted sample Multi AV Scanner detection for submitted file Yara detected Mirai Deletes system log files Found strings related to Crypto-Mining Sample deletes itself Sample is packed with UPX Sample tries to kill multiple processes (SIGKILL) Creates hidden files and/or directories Creates hidden files without content (potentially used as a mutex ...

  2026-09-25 09:59 UTC
• MIRA: Cross Compiling
  web:www.mira-project.org

  Contents Prepare MIRA system requirements Setup cross compiling toolchain Copy libraries of target system to the build system Cross compile MIRA Generate manifest files on target system Basics Cross compiling can become interesting if one wants to run MIRA on a device that is hardly capable of compiling MIRA on its own (e.g. due to CPU or MEMORY limitation). Cross compile can greatly help in ...

  2026-09-25 09:59 UTC

Only Available for Registered Users. Sign in to view.