Rewterz
Rewterz Threat Alert – GuLoader Malspam Campaign – Active IOCs
June 17, 2022
Rewterz
Rewterz Threat Alert – LokiBot Malware – Active IOCs
June 17, 2022

Rewterz Threat Alert – Mirai Botnet – Active IOCs

Severity

High

Analysis Summary

A new Mirai variant is making the rounds called mirai_pteamirai. The botnet exploits a vulnerability in KGUARD DVR to spread within an environment. The vulnerability exists in the 2016 firmware version and is fixed in any version after the 2017 release. This botnet is active and used to cause DDoS conditions.

Impact

  • Server Outage
  • Data Loss
  • Website Downtime

Indicators of Compromise

MD5

  • 145a7f648f5d695bc578033a7b70d78f

SHA-256

  • 085c715ddd74c14dc3ff079dfd47829d591237b066ab1dfa1cbf26a768a0ada3

SHA-1

  • 65f90b7a0419bbea539af08cd144a5edf44d2f63

Remediation

  • Block all threat indicators at your respective controls.
  • Search for IOCs in your environment.