TF-2020265
high
📛 Threat Title
Mirai: SHA256 hash of a malware sample (payload) 0f8b52182cb5e47b55b4eefadf746114c0215e976df99b3ab1be04871f533b96
Description
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Mirai (aliases: Katana). Confidence: 90. First seen: 2026-11-08 06:57:42 UTC. Reporter: Tuxxin. Tags: elf, Mirai.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
0f8b52182cb5e47b55b4eefadf746114c0215e976df99b3ab1be04871f533b96
IOC database
- Type
- hash_sha256
- Value
0f8b52182cb5e47b55b4eefadf746114c0215e976df99b3ab1be04871f533b96- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- SHA256 hash of a malware sample (payload) attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: SHA256 hash of a malware sample (payload). Attributed malware: Mirai (aliases: Katana). Confidence: 90. First seen: 2026-11-08 06:57:42 UTC. Reporter: Tuxxin. Tags: elf, Mirai.
Remediations (10)
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family. The page below gives you an overview on malware samples that MalwareBazaar has identified as Mirai .
-
web:bazaar.abuse.ch
Information on Mirai malware sample ( SHA256 0d9c2fc428a439023699504b3a4cc021d371c9d8dc38ef4eebb9bb9c60220459) MalwareBazaar uses YARA rules from several public and ...
-
web:bazaar.abuse.ch
Information on Mirai malware sample ( SHA256 10c796b7308ac0b9c38f1caa95c798b2b28c46adaa037a9c3a9ebdd3569824e3) MalwareBazaar uses YARA rules from several public and ...
-
web:bazaar.abuse.ch
Information on Mirai malware sample ( SHA256 3a87f9a9f0ac2407e7b413926cc23d47c5e17d4ab554bcbb221661dbc0feab9a) MalwareBazaar uses YARA rules from several public and ...
-
web:bazaar.abuse.ch
Information on Mirai malware sample ( SHA256 e71afa21cc4ec30b1e80e4a86b4af30b93812093c93e32f8ab458691b05168a7) MalwareBazaar uses YARA rules from several public and ...
-
web:bazaar.abuse.ch
You are currently viewing the MalwareBazaar entry for SHA256 f81c1a9018bca07ab3abe4f075df2b6b1d175c8162f3586fd69d3f15d49d032f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
-
web:cipherssecurity.com
Check MD5, SHA-1, or SHA-256 file hashes against MalwareBazaar and VirusTotal feeds. Drop a file — hashing happens in your browser, never uploaded.
-
web:threatfox.abuse.ch
Mirai IOC: b8f09bc9b59ca5028aac03833019ba4d654fcbd73bc9a4eaeff977f1ae247265 ( sha256_hash ) ThreatFox IOC Database You are viewing the ThreatFox database entry for ...
-
web:threatfox.abuse.ch
Mirai IOC: 8a089f6531d778279f92d6651f50fa10ba2d49d26c474d9fb9ed33c522918baa ( sha256_hash ) ThreatFox IOC Database You are viewing the ThreatFox database entry for ...
-
web:www.yazoul.net
Mirai threat intelligence: 2900 samples tracked, 29 daily reports, IOCs, detection rates, and C2 infrastructure. Updated daily from MalwareBazaar.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.