MB-eb0c50050c928e7c7086672a9e7bd4e5248699c17fe5e68457eaaec565b8bfae
high
📛 Threat Title
Mirai: iran.armv6l
Description
File type: elf. Size: 140252 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-06-13 15:10:03.
Remediations (10)
-
web:arxiv.org
Paras Jha and Josiah White created Mirai , co-founders of Protraf Solutions, which offered mitigation services for DDoS attacks [28]. Mirai has created the basis for many botnets that exist today.
-
web:dailysecurityreview.com
The Mirai botnet, a notorious piece of malware, launched devastating DDoS attacks in 2016. This blog post delves into its origins, spread, impact, and the ongoing threat it represents, providing crucial information on mitigating Mirai botnet risks.
-
web:en.wikipedia.org
Mirai (from the Japanese word for "future", 未来) is malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks.
-
web:github.com
This repository contains the leaked source code of the Mirai botnet, originally created to infect IoT devices and launch large-scale DDoS attacks. This code is provided strictly for cybersecurity research, reverse engineering, malware analysis, and detection development purposes only.
-
web:urlhaus.abuse.ch
Payload delivery The table below documents all payloads that URLhaus retrieved from this particular URL.
-
web:westoahu.hawaii.edu
A botnet called Mirai infected hundreds of thousands of Internet of Things (IoT) devices, amassing a wide network of compromised devices. Mitigations against the Mirai botnet involve taking proactive security measures, properly hardening systems, and updating to the latest software to reduce the risk of compromise.
-
web:www.akamai.com
Akamai has uncovered two zero-day vulnerabilities that are being actively exploited to spread a Mirai variant in the wild. Read on for details and mitigation .
-
web:www.cisecurity.org
The Mirai botnet soon spread to infect thousands of internet of things (IoT) devices and evolved to conduct full, large-scale attacks. After noticing an increase in infections, Mirai caught the attention of the nonprofit organization MalwareMustDie in August 2016, who then started to research, analyze, and track the botnet [2].
-
web:www.joesandbox.com
Malware Analysis System Evasion Source: /tmp/iran.armv6l.elf (PID: 5427) Queries kernel information via 'uname': Jump to behavior
-
web:www.semanticscholar.org
This article summarizes the common vulnerabilities targeted by these variants and analyzes the infection mechanism through vulnerability analysis and provides an overview of possible defense solutions. Mirai is undoubtedly one of the most significant Internet of Things (IoT) botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed ...
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
eb0c50050c928e7c7086672a9e7bd4e5248699c17fe5e68457eaaec565b8bfae
IOC database
- Type
- hash_sha256
- Value
eb0c50050c928e7c7086672a9e7bd4e5248699c17fe5e68457eaaec565b8bfae- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
ddd7b60f0b7856ba1b50fdeadf294f2cc0d48e9d
IOC database
- Type
- hash_sha1
- Value
ddd7b60f0b7856ba1b50fdeadf294f2cc0d48e9d- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
e34aa2c0e748c8e0fc0f1e08acbac6fc
IOC database
- Type
- hash_md5
- Value
e34aa2c0e748c8e0fc0f1e08acbac6fc- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 140252 bytes. Tags: elf, Mirai. Reporter: abuse_ch. First seen: 2026-06-13 15:10:03.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.