MB-e2b9601d09ff795cf4d070cd3f308ddbe03a28330cf40559abe4faae28948b95 high

Description

File type: elf. Size: 1141959 bytes. Tags: elf, Gafgyt, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 04:51:18.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 1141959 bytes. Tags: elf, Gafgyt, Mirai. Reporter: abuse_ch. First seen: 2026-09-25 04:51:18.

• A_Survey_on_The_Mirai_IoT_Botnet_and_Its_Recent_Variants (2)
  web:arxiv.org

  Abstract—Mirai is undoubtedly one of the most significant Internet of Things (IoT) botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several variants that combined the old code with newer vulnerabilities found on popular IoT devices ...

  2026-09-25 09:58 UTC
• The Mirai Botnet: The Infamous DDoS Weapon - Blog
  web:dailysecurityreview.com

  The Mirai botnet, a notorious piece of malware, launched devastating DDoS attacks in 2016. This blog post delves into its origins, spread, impact, and the ongoing threat it represents, providing crucial information on mitigating Mirai botnet risks.

  2026-09-25 09:58 UTC
• Mirai Malware Spreads Via GeoVision Zero-Day Exploit
  web:dailysecurityreview.com

  A Mirai malware botnet is leveraging a zero-day vulnerability (CVE-2024-11120) in outdated GeoVision devices to deploy malware, potentially for DDoS attacks or cryptomining. Thousands of vulnerable devices are exposed online.

  2026-09-25 09:58 UTC
• IoT Secure Gateway: Mirai Mitigation Lab - GitHub
  web:github.com

  Containerized IoT security lab simulating Mirai -style botnet behavior and validating an nftables default-deny gateway defense, with automated evidence capture and reporting. - Jehosua97/iot-secure-gateway- mirai - mitigation

  2026-09-25 09:58 UTC
• Proactive detection of Mirai botnet threats: leveraging XGBoost for ...
  web:ieeexplore.ieee.org

  Furthermore, improved computational efficiency leads to shorter training and prediction timeframes, less memory utilization, and more responsive detection capabilities. Overall, the proposed system provides a strong framework for proactive detection and mitigation of Mirai botnet threats, which improves network security in real-world scenarios.

  2026-09-25 09:58 UTC
• bot_mips64el - Malicious Sample - Maltiverse
  web:maltiverse.com

  Hashes Filename: bot_mips64el md5: 0f991ad5788ef05392c7e3697f776012 sha1: 8c10046a2afd1e067f66a4f5ef7e42197ce997ca sha256: d12c43c359c82e4a6ca3da6690363bf9b3f3e1d699dcf00e804b833d5d956f46 sha512: In depth details Filetype: Architecture: Compiler: Size (Bytes): Classification: malicious Mutex mutex: Dates Indexed: 2026-04-22 18:24:55 (2026-04-22 ...

  2026-09-25 09:58 UTC
• Mirai Botnet Forensic Analysis - Cyber - westoahu.hawaii.edu
  web:westoahu.hawaii.edu

  Practicing proper mitigation techniques and being proactive can help reduce device vulnerabilities, and prevent the creation of more bots and limit the resources botnet operators have. References [1] Cloudflare. (2017, December 14). Inside the Infamous Mirai IoT Botnet: A Retrospective.

  2026-09-25 09:58 UTC
• Mirai Botnet: How It Works and How to Stop It - Indusface
  web:www.indusface.com

  How to Mitigate the Mirai Botnet Along with addressing security weaknesses in your IoT devices and their usage, it's crucial to adopt best practices and technologies to safeguard your network against Mirai botnet attacks. Key recommendations include: Secure Device Credentials: Always change the default usernames and passwords on your IoT devices.

  2026-09-25 09:58 UTC
• Automated Malware Analysis Report for bot.mips64el.elf - Generated by ...
  web:www.joesandbox.com

  Malware Analysis System Evasion Uses the "uname" system call to query kernel version information (possible evasion) Source: /tmp/bot.mips64el.elf (PID: 6226) Queries kernel information via 'uname': Jump to behavior May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

  2026-09-25 09:58 UTC
• PDF Mirai Botnet - Quorum Cyber
  web:www.quorumcyber.com

  Mirai initially infected and weaponised devices such as smart cameras and Realtek routers2. The botnet variant was created in a racketeering attempt by the cofounders of Protraf Solutions, an organisation offering DDoS mitigation services.

  2026-09-25 09:58 UTC

Only Available for Registered Users. Sign in to view.