MB-66676fc2f8a2432b9545457d44d0ca4860c2e30affd375420ac8dede00b8b1e8 high

Description

File type: elf. Size: 1094575 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-23 23:43:16.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 1094575 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-09-23 23:43:16.

• User compliance and remediation success after IoT malware notifications
  web:academic.oup.com

  The ISP has been mitigating IoT infections of the Mirai family based on the abuse data it receives. We briefly discuss Mirai and then describe the notification mechanisms of the ISP, as well as the remediation steps that the users are asked to perform. Mirai malware.

  2026-09-24 04:07 UTC
• Mirai Malware Analysis, Overview by ANY.RUN
  web:any.run

  Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.

  2026-09-24 04:07 UTC
• Mirai Malware Spreads Via GeoVision Zero-Day Exploit
  web:dailysecurityreview.com

  A Mirai malware botnet is leveraging a zero-day vulnerability (CVE-2024-11120) in outdated GeoVision devices to deploy malware, potentially for DDoS attacks or cryptomining. Thousands of vulnerable devices are exposed online.

  2026-09-24 04:07 UTC
• New Mirai Botnet Leverages Zero-Day Exploits on Routers
  web:dailysecurityreview.com

  A new Mirai botnet is using zero-day exploits to target industrial routers and smart home devices, launching high-intensity DDoS attacks. Learn about the vulnerabilities and how to protect your systems.

  2026-09-24 04:07 UTC
• Mirai Source Code - GitHub
  web:github.com

  Mirai is a malware botnet that infects Internet of Things (IoT) devices using default or weak login credentials. Once infected, these devices are controlled by a command-and-control (CnC) server and can be used to launch DDoS attacks. This repo is a fork of the original leaked source code and includes components such as: The bot (runs on IoT devices) The CnC server The loader (infects devices ...

  2026-09-24 04:07 UTC
• mirai | i686 | Triage™
  web:tria.ge

  Check this mirai report i686, with a score of 10 out of 10.

  2026-09-24 04:07 UTC
• Mirai Botnet Forensic Analysis - Cyber - westoahu.hawaii.edu
  web:westoahu.hawaii.edu

  Practicing proper mitigation techniques and being proactive can help reduce device vulnerabilities, and prevent the creation of more bots and limit the resources botnet operators have. References [1] Cloudflare. (2017, December 14). Inside the Infamous Mirai IoT Botnet: A Retrospective.

  2026-09-24 04:07 UTC
• Here Comes Mirai: IoT Devices RSVP to Active Exploitation
  web:www.akamai.com

  Mirai -based botnets continue to be a call for divorce for many organizations, and the prevalence of outdated IoT devices help propagate this threat. Like security researchers, some threat actors keep up to date on the latest vulnerability disclosures relevant to their illicit activities.

  2026-09-24 04:07 UTC
• New Mirai variants target routers and DVRs in parallel campaigns
  web:www.helpnetsecurity.com

  Security researchers have documented new Mirai variants leveraged in campaigns exploiting command injection flaws in consumer IoT devices.

  2026-09-24 04:07 UTC
• ASERT Threat Summary: Aisuru and Related TurboMirai Botnet DDoS Attack ...
  web:www.netscout.com

  Arbor Networks - DDoS Experts ASERT Threat Summary: Aisuru and Related TurboMirai Botnet DDoS Attack Mitigation and Suppression—October 2025—v1.0

  2026-09-24 04:07 UTC

Only Available for Registered Users. Sign in to view.