MB-968d6684b22dd9b4b39f9e4e376c194c6f95a318850cd703300acdcefd96596e high

Description

File type: elf. Size: 25372 bytes. Tags: elf, Mirai, upx. Reporter: abuse_ch. First seen: 2026-09-25 05:00:11.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 25372 bytes. Tags: elf, Mirai, upx. Reporter: abuse_ch. First seen: 2026-09-25 05:00:11.

• Mirai Malware Analysis, Overview by ANY.RUN
  web:any.run

  Mirai is a self-propagating malware that scans the internet for vulnerable IoT devices and infects them to create a botnet. Mirai variants utilize lists of common default credentials to gain access to devices. Mirai's primary use is for launching distributed denial-of-service (DDoS) attacks, but it has also been used for cryptocurrency mining.

  2026-09-25 09:59 UTC
• New Mirai Botnet Leverages Zero-Day Exploits on Routers
  web:dailysecurityreview.com

  A new Mirai botnet is using zero-day exploits to target industrial routers and smart home devices, launching high-intensity DDoS attacks. Learn about the vulnerabilities and how to protect your systems.

  2026-09-25 09:59 UTC
• Mirai Source Code - GitHub
  web:github.com

  Mirai is a malware botnet that infects Internet of Things (IoT) devices using default or weak login credentials. Once infected, these devices are controlled by a command-and-control (CnC) server and can be used to launch DDoS attacks. This repo is a fork of the original leaked source code and includes components such as: The bot (runs on IoT devices) The CnC server The loader (infects devices ...

  2026-09-25 09:59 UTC
• Remediation vs. Mitigation: What's the Difference? - Panorays
  web:panorays.com

  Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.

  2026-09-25 09:59 UTC
• Mirai Botnet | ARM Reverse Engineering Walkthrough
  web:trainsec.net

  Final Thoughts: A Call to Continuous Mastery Unpacking an ARM-based Mirai sample exemplifies the thrill and challenge of modern cybersecurity work. As IoT devices and Linux-based systems become more ubiquitous in enterprise networks, staying on top of evolving threats is essential. Take this as your motivation to keep refining your reverse engineering, malware analysis, and forensics ...

  2026-09-25 09:59 UTC
• mirai | arm5 [.]elf | Triage™
  web:tria.ge

  Check this mirai report arm5[.]elf, with a score of 10 out of 10.

  2026-09-25 09:59 UTC
• mirai | arm5 | Triage™
  web:tria.ge

  Check this mirai report arm5 , with a score of 10 out of 10.

  2026-09-25 09:59 UTC
• InfectedSlurs Botnet Spreads Mirai via Zero-Days - Akamai
  web:www.akamai.com

  Akamai has uncovered two zero-day vulnerabilities that are being actively exploited to spread a Mirai variant in the wild. Read on for details and mitigation .

  2026-09-25 09:59 UTC
• Linux Analysis Report mirai.arm5.elf - Joe Sandbox
  web:www.joesandbox.com

  Hooking and other Techniques for Hiding and Protection Source: mirai . arm5 .elf Submission file: segment LOAD with 7.8824 entropy (max. 8.0)

  2026-09-25 09:59 UTC
• Automated Malware Analysis Management Report for mirai.arm5.elf ...
  web:www.joesandbox.com

  Source: /tmp/ mirai . arm5 .elf (PID: 6214) Queries kernel information via 'uname': Jump to behavior May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

  2026-09-25 09:59 UTC

Only Available for Registered Users. Sign in to view.