MB-e6963b7973952ad9cfaeb3385c637f6e24f44f3b354b6faf004ce26f43f1200f high

Description

File type: elf. Size: 219704 bytes. Tags: elf, Mirai, Torii. Reporter: abuse_ch. First seen: 2026-10-31 14:36:17.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 219704 bytes. Tags: elf, Mirai, Torii. Reporter: abuse_ch. First seen: 2026-10-31 14:36:17.

• A_Survey_on_The_Mirai_IoT_Botnet_and_Its_Recent_Variants (2)
  web:arxiv.org

  Abstract—Mirai is undoubtedly one of the most significant Internet of Things (IoT) botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several variants that combined the old code with newer vulnerabilities found on popular IoT devices ...

  2026-11-01 03:32 UTC
• MalwareBazaar | SHA256 ...
  web:bazaar.abuse.ch

  You are currently viewing the MalwareBazaar entry for SHA256 37e916a94348781f75e03035716479f2a0ab59b7d9eda03b5dcd4621ff1768bc. While MalwareBazaar tries to identify ...

  2026-11-01 03:32 UTC
• Iranian Hackers Manipulate SCADA Displays After Breaching U.S. Critical ...
  web:cyberpress.org

  U.S. federal agencies have issued an urgent warning that Iranian-affiliated threat actors are targeting internet-exposed programmable logic controllers (PLCs) used across critical infrastructure. The activity has disrupted industrial operations by tampering with PLC project files and altering information shown to operators through human-machine interface (HMI) and supervisory control and data ...

  2026-11-01 03:32 UTC
• Mirai (malware) - Wikipedia
  web:en.wikipedia.org

  Mirai (from the Japanese word for "future", 未来) is malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks.

  2026-11-01 03:32 UTC
• CVE-2026-98432 temporary mitigation - GitHub
  web:github.com

  This repository holds scripts that drop IPv4 TCP packets carrying IP options on a Linux host. On hosts without SELinux/Smack NetLabel CIPSO labeling, CVE-2026-98432 (a Linux kernel IPv4 TCP use-after-free) cannot trigger without such packets. It is a temporary mitigation , not a fix. It was not tested against a real exploit (there is no public PoC), and no vendor endorses it. If your ...

  2026-11-01 03:32 UTC
• PDF Malware Detection and Mitigation Techniques: Lessons Learned from Mirai ...
  web:www.jisem-journal.com

  Presenting an in-depth security analysis of Mirai botnet, a malware that affected the availability of banking systems and put in evidence a new form of DDoS attack that works with IoT devices compromised by malware. The methods presented are generic and can be used to mitigate any malware of the same nature.

  2026-11-01 03:32 UTC
• Linux Analysis Report iranbot-ultimate.mipsel.elf
  web:www.joesandbox.com

  Source: /tmp/ iranbot -ultimate.mipsel.elf (PID: 4114) Queries kernel information via 'uname': Jump to behavior May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) Source: iranbot -ultimate.mipsel.elf, 4114.1.000055791f6df000.000055791f766000.rw-.sdmp Binary or memory string: yU!/etc/qemu-binfmt/mipsel

  2026-11-01 03:32 UTC
• Linux Analysis Report iranbot-ultimate.mips.elf
  web:www.joesandbox.com

  Signatures Antivirus / Scanner detection for submitted sample Multi AV Scanner detection for submitted file Executes the "systemctl" command used for controlling the systemd system and service manager Reads system version information Sample has stripped symbol table Sample tries to kill a process (SIGKILL) Uses the "uname" system call to query kernel version information (possible evasion)

  2026-11-01 03:32 UTC
• PDF Mirai Botnet - Quorum Cyber
  web:www.quorumcyber.com

  Mirai initially infected and weaponised devices such as smart cameras and Realtek routers2. The botnet variant was created in a racketeering attempt by the cofounders of Protraf Solutions, an organisation offering DDoS mitigation services.

  2026-11-01 03:32 UTC
• Malware Detection and Mitigation Techniques: Lessons Learned from Mirai ...
  web:www.researchgate.net

  Presenting an in-depth security analysis of Mirai botnet, a malware that affected the availability of banking systems and put in evidence a new form of DDoS attack that works with IoT devices ...

  2026-11-01 03:32 UTC

Only Available for Registered Users. Sign in to view.