MB-6e7d98f590da5a91bf0285d31002b80fb373a88aa1c355e63da5f6a4bd8f46c1 high

Description

File type: elf. Size: 170150 bytes. Tags: elf, Mirai, upx-dec. Reporter: abuse_ch. First seen: 2026-08-04 21:16:59.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• MalwareBazaar sample page Abuse.ch

  File type: elf. Size: 170150 bytes. Tags: elf, Mirai, upx-dec. Reporter: abuse_ch. First seen: 2026-08-04 21:16:59.

• Malware analysis boatnet.arm7 Malicious activity - any.run
  web:any.run

  Online sandbox report for boatnet.arm7 , tagged as auto, mirai , botnet, verdict: Malicious activity

  2026-08-05 06:36 UTC
• Mirai Botnet Exploiting Command Injection Vulnerabilities in GeoVision ...
  web:cyberpress.org

  Remote, unauthenticated attackers are able to inject arbitrary system commands, enabling full device compromise without user interaction. Investigation revealed that threat actors are leveraging the compromised endpoint to download and execute Mirai -based ARM malware, notably a variant referred to as "LZRD" (typically named boatnet.arm7 ). Upon execution, this Mirai variant displays a ...

  2026-08-05 06:36 UTC
• Mirai Botnet | ARM Reverse Engineering Walkthrough
  web:trainsec.net

  Final Thoughts: A Call to Continuous Mastery Unpacking an ARM-based Mirai sample exemplifies the thrill and challenge of modern cybersecurity work. As IoT devices and Linux-based systems become more ubiquitous in enterprise networks, staying on top of evolving threats is essential. Take this as your motivation to keep refining your reverse engineering, malware analysis, and forensics ...

  2026-08-05 06:36 UTC
• mirai | boatnet [.]arm7 | Triage™
  web:tria.ge

  Check this mirai report boatnet[.]arm7 , with a score of 10 out of 10.

  2026-08-05 06:36 UTC
• mirai | boatnet [.]arm7 [.]elf | Triage™
  web:tria.ge

  Check this mirai report boatnet[.]arm7[.]elf, with a score of 10 out of 10.

  2026-08-05 06:36 UTC
• Mirai Botnet Forensic Analysis - Cyber - westoahu.hawaii.edu
  web:westoahu.hawaii.edu

  A botnet called Mirai infected hundreds of thousands of Internet of Things (IoT) devices, amassing a wide network of compromised devices. Mitigations against the Mirai botnet involve taking proactive security measures, properly hardening systems, and updating to the latest software to reduce the risk of compromise.

  2026-08-05 06:36 UTC
• Here Comes Mirai: IoT Devices RSVP to Active Exploitation
  web:www.akamai.com

  Conclusion Mirai -based botnets continue to be a call for divorce for many organizations, and the prevalence of outdated IoT devices help propagate this threat. Like security researchers, some threat actors keep up to date on the latest vulnerability disclosures relevant to their illicit activities.

  2026-08-05 06:36 UTC
• InfectedSlurs Botnet Spreads Mirai via Zero-Days - Akamai
  web:www.akamai.com

  Akamai has uncovered two zero-day vulnerabilities that are being actively exploited to spread a Mirai variant in the wild. Read on for details and mitigation .

  2026-08-05 06:36 UTC
• Automated Malware Analysis Report for boatnet.arm7.elf - Generated by ...
  web:www.joesandbox.com

  Source: boatnet.arm7.elf Submission file: segment LOAD with 7.9534 entropy (max. 8.0) Malware Analysis System Evasion Uses the "uname" system call to query kernel version information (possible evasion) ... May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

  2026-08-05 06:36 UTC
• Automated Malware Analysis Management Report for boatnet.arm7.elf ...
  web:www.joesandbox.com

  Signatures Antivirus / Scanner detection for submitted sample Malicious sample detected (through community Yara rule) Yara detected Mirai Contains symbols with names commonly found in malware Sample tries to kill multiple processes (SIGKILL) Creates hidden files and/or directories

  2026-08-05 06:36 UTC

Only Available for Registered Users. Sign in to view.