MB-1bafdd67675ffd47db0a52982a706bcf5a08a27b69c1f518acda3fb946a75ea7 high

Description

File type: elf. Size: 728615 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 23:00:29.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 728615 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 23:00:29.

• A_Survey_on_The_Mirai_IoT_Botnet_and_Its_Recent_Variants (2)
  web:arxiv.org

  Abstract—Mirai is undoubtedly one of the most significant Internet of Things (IoT) botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several variants that combined the old code with newer vulnerabilities found on popular IoT devices ...

  2026-09-26 03:13 UTC
• IoT Secure Gateway: Mirai Mitigation Lab - GitHub
  web:github.com

  IoT Secure Gateway: Mirai Mitigation Lab A network security project that simulates Mirai -style IoT attack behavior and validates a firewall-based defense using Docker, Linux networking, nftables, Bash, and PowerShell automation.

  2026-09-26 03:13 UTC
• Mirai Source Code - GitHub
  web:github.com

  Mirai is a malware botnet that infects Internet of Things (IoT) devices using default or weak login credentials. Once infected, these devices are controlled by a command-and-control (CnC) server and can be used to launch DDoS attacks. This repo is a fork of the original leaked source code and includes components such as: The bot (runs on IoT devices) The CnC server The loader (infects devices ...

  2026-09-26 03:13 UTC
• Dissecting Mirai: Spatio-Sequential Analysis and Restoration ... - Springer
  web:link.springer.com

  Following the public release of its source code in 2016, numerous variants have proliferated, broadening its attack surface and complicating detection and mitigation efforts. Despite extensive research on Mirai , existing analyses remain fragmented and informal, lacking a structured representation of its attack patterns.

  2026-09-26 03:13 UTC
• Analysis of Mirai Malware and Its Components - Springer
  web:link.springer.com

  Releasing its source code provides a way for the attackers to create its variants and provides researchers with a path in the right direction to tackle upcoming variants of Mirai malware. Although the mechanism of attacks and implementation of Mirai seems easy, its implementation is challenging.

  2026-09-26 03:13 UTC
• In-depth Analysis of a New Mirai Variant - rruzi.github.io
  web:rruzi.github.io

  In-depth Analysis of a New Mirai Variant 7 minute read Published: December 28, 2024 I. Background Recently, NSFOCUS [1], National Cyber Security Center (NCSC) [2], and 360 Security Brain [3] detected a batch of botnet samples that integrate the TEA algorithm for encryption based on the leaked source code of Mirai , targeting IoT/Linux devices of various architectures such as ARM, MIPS, and x86 ...

  2026-09-26 03:13 UTC
• Mirai Botnet | ARM Reverse Engineering Walkthrough
  web:trainsec.net

  In this particular case, I found an ARM-compiled Mirai botnet sample. The anti-virus checks labeled it as " Mirai ," matching what I found in the documentation, sandbox analyses, and community threat intelligence sources. Mirai is known to compile variants for multiple architectures (ARM, MIPS, x86, x64, etc.), making it adaptable and widespread.

  2026-09-26 03:13 UTC
• InfectedSlurs Botnet Spreads Mirai via Zero-Days - Akamai
  web:www.akamai.com

  Akamai has uncovered two zero-day vulnerabilities that are being actively exploited to spread a Mirai variant in the wild. Read on for details and mitigation .

  2026-09-26 03:13 UTC
• Linux Analysis Report stub.mips.elf - Joe Sandbox
  web:www.joesandbox.com

  General Information Joe Sandbox version: 45.0.0 Green Opal Analysis ID: 1975075 Start date and time: 2026-09-19 07:57:35 +02:00 Joe Sandbox product: CloudBasic Overall analysis duration: 0h 4m 20s Hypervisor based Inspection enabled: false Report type: full Cookbook file name: defaultlinuxfilecookbook.jbs Analysis system description: Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0 ...

  2026-09-26 03:13 UTC
• PDF Mirai Botnet - Quorum Cyber
  web:www.quorumcyber.com

  Mirai initially infected and weaponised devices such as smart cameras and Realtek routers2. The botnet variant was created in a racketeering attempt by the cofounders of Protraf Solutions, an organisation offering DDoS mitigation services.

  2026-09-26 03:13 UTC

Only Available for Registered Users. Sign in to view.