MB-2b6c2e6c2ef7396f6dca3183fb894ff41b3180bac8d9746c124de7b4ef3575a0
high
📛 Threat Title
Mirai: SecuriteInfo.com.ELF.Mirai-COW.41418858
Description
File type: elf. Size: 550952 bytes. Tags: elf, Mirai. Reporter: SecuriteInfoCom. First seen: 2026-09-25 03:44:13.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
2b6c2e6c2ef7396f6dca3183fb894ff41b3180bac8d9746c124de7b4ef3575a0
IOC database
- Type
- hash_sha256
- Value
2b6c2e6c2ef7396f6dca3183fb894ff41b3180bac8d9746c124de7b4ef3575a0- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
866f4ef65b25ea699cd2e18b05d4245045b3b91b
IOC database
- Type
- hash_sha1
- Value
866f4ef65b25ea699cd2e18b05d4245045b3b91b- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
5b9f98ea6e444a5ba8a98a234e44fd03
IOC database
- Type
- hash_md5
- Value
5b9f98ea6e444a5ba8a98a234e44fd03- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 550952 bytes. Tags: elf, Mirai. Reporter: SecuriteInfoCom. First seen: 2026-09-25 03:44:13.
Remediations (10)
-
web:any.run
Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.
-
web:any.run
Online sandbox report for SecuriteInfo.com.ELF. Mirai -CBI.38444756, tagged as mirai , botnet, verdict: Malicious activity
-
web:app.any.run
Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.
-
web:en.wikipedia.org
Mirai (from the Japanese word for "future", 未来) is malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks.
-
web:github.com
Mirai (Japanese for "the future") is malware that turns computer systems running Linux into remotely controlled "bots", that can be used as part of a botnet in large-scale network attacks.
-
web:malpedia.caad.fkie.fraunhofer.de
Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices.
-
web:maltiverse.com
SecuriteInfo.com.ELF. Mirai -AAJ.11431921 md5: 1688b7461c74a0752bd2e4c9d76f98cd sha1: cfeb5820b9814d457cac23a7358d0d958a28ec12 sha256: e06cabee30edff3e4d4cdcd413eef1adcad0009ec695af4cf4e861bcd5af614f sha512: In depth details Filetype: Architecture: Compiler: Size (Bytes): Classification: malicious Mutex mutex: Dates Indexed: 2026-03-13 14:34:53 ...
-
web:threatfox.abuse.ch
The page below gives you an overview on indicators of compromise associated with elf. mirai . You can also get this data through the ThreatFox API. Database Entry ... Indicators Of Compromise The table below shows all indicators of compromise (IOCs) that are associated with this particulare malware family (max 1000).
-
web:www.joesandbox.com
Runtime Messages Command: /tmp/SecuriteInfo.com.ELF. Mirai -COW.16109.24065.elf PID: 6227 Exit Code: 1 Exit Code Info: Killed: False Standard Output: Standard Error:
-
web:www.joesandbox.com
Runtime Messages Command: /tmp/SecuriteInfo.com.ELF. Mirai -COW.6055.9040.elf PID: 5429 Exit Code: 0 Exit Code Info: Killed: False Standard Output: Firmware update in progress Standard Error:
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.