MB-349c898a6bad5a990387441b09aaa920e95a9c7d157b05c4a6891a469d6948f8 high

Description

File type: elf. Size: 1095553 bytes. Tags: elf, Gafgyt, Mirai. Reporter: abuse_ch. First seen: 2026-09-23 23:14:33.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 1095553 bytes. Tags: elf, Gafgyt, Mirai. Reporter: abuse_ch. First seen: 2026-09-23 23:14:33.

• Mirai Malware Analysis, Overview by ANY.RUN
  web:any.run

  Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.

  2026-09-24 03:44 UTC
• New Mirai Botnet Leverages Zero-Day Exploits on Routers
  web:dailysecurityreview.com

  A new Mirai botnet is using zero-day exploits to target industrial routers and smart home devices, launching high-intensity DDoS attacks. Learn about the vulnerabilities and how to protect your systems.

  2026-09-24 03:44 UTC
• Installation Guide | lion001am/Condi-Mirai | DeepWiki
  web:deepwiki.com

  This guide provides comprehensive instructions for setting up the Condi- Mirai botnet environment, including system dependencies, cross-compiler installation, database configuration, and service execution.

  2026-09-24 03:44 UTC
• Mirai (malware) - Wikipedia
  web:en.wikipedia.org

  Mirai (from the Japanese word for "future", 未来) is malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks.

  2026-09-24 03:44 UTC
• Mirai Source Code - GitHub
  web:github.com

  This repository contains the leaked source code of the Mirai botnet, originally created to infect IoT devices and launch large-scale DDoS attacks. This code is provided strictly for cybersecurity research, reverse engineering, malware analysis, and detection development purposes only.

  2026-09-24 03:44 UTC
• GitHub - malol01/cross-compiler-for-mirai-archive · GitHub
  web:github.com

  Contribute to malol01/cross-compiler-for- mirai -archive development by creating an account on GitHub.

  2026-09-24 03:44 UTC
• Mirai Botnet Forensic Analysis - Cyber - westoahu.hawaii.edu
  web:westoahu.hawaii.edu

  Practicing proper mitigation techniques and being proactive can help reduce device vulnerabilities, and prevent the creation of more bots and limit the resources botnet operators have. References [1] Cloudflare. (2017, December 14). Inside the Infamous Mirai IoT Botnet: A Retrospective.

  2026-09-24 03:44 UTC
• Automated Malware Analysis Report for i586.elf - Joe Sandbox
  web:www.joesandbox.com

  Source: i586.elf, type: SAMPLE Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan. Mirai , fingerprint ...

  2026-09-24 03:44 UTC
• Automated Malware Analysis Report for mirai.i586.elf - Joe Sandbox
  web:www.joesandbox.com

  Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese.

  2026-09-24 03:44 UTC
• Mirai Malware - IOCs, Reports & Analysis (2026)
  web:www.yazoul.net

  Mirai threat intelligence: 2400 samples tracked, 24 daily reports, IOCs, detection rates, and C2 infrastructure. Updated daily from MalwareBazaar.

  2026-09-24 03:44 UTC

Only Available for Registered Users. Sign in to view.