07-09-2026
Tengu: Reverse Engineering a Mirai-Style Linux/IoT Botnet
https://app.reverser.space/p/duckie/tengu-reverse-engineering-a-mirai-style-linux-iot
Report completeness: Medium
Threats:
Tengu_botnet
Mirai
Tsunami_botnet
Bashlite
Hajime
Victims:
Linux servers, Embedded systems, Internet of things devices
TTPs:
Tactics: 2
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1016, T1027, T1036, T1037, T1053.003, T1057, T1082, T1090, T1140, T1498, have more...
IOCs:
File: 1
IP: 2
Hash: 1
Soft:
Linux, systemd, OpenWrt, crontab
Algorithms:
md5, xor, sha256, sha1
Languages:
php
Platforms:
x86
YARA: Found