Rewterz Threat Alert – Mirai Botnet – Active IOCs

Severity

High

Analysis Summary

A new Mirai variant is making the rounds called mirai_pteamirai. This botnet is one of the significant botnets targeting exposed networking devices running Linux. Mirai means ‘future’ in Japanese. This botnet is one of the active botnet and used to cause DDoS conditions. IP cameras, home routers, and other IoT devices are the common targets of this botnet.

Impact

Server Outage
Data Loss
Website Downtime

Indicators of Compromise

MD5

0d0baeb6eb89e0aea1108f3b0fbdad50
548f7249fd5d55b005c97940a028ed6a
3c59e07ab3c885f71e418d39f1cad88c

SHA-256

c424b5803835762b6369aa6d2633128be4f80187b053e95608c53e85e1308837
15c3cd7c07ac2629cc550a1abf5e7daf47796f2e9d22efc443c9f5e6c52580f0
9379cb6b06f46f4ad7ef69d86891507a81678eb9e654b4c2bda4bef9d038ee1e

SHA-1

90ddb1a994c1ba827c1a9b616a95b37cb7bad00c
7ece81c2f90e15af64430dae06350c856325754c
ab5e6febd72dd80d16070197c0decb58400de477

Remediation

Upgrade your operating system.
Don’t open files and links from unknown sources.
Install and run anti-virus scans.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo