What even is Mirai?

What even is Mirai?

Unix.Trojan.Mirai$ ls *.elf.* | wc -l
      65
Unix.Trojan.Mirai$ clamscan *.elf.* | grep Unix.Trojan.Mirai | wc -l
      65
Unix.Trojan.Mirai$ wc -l triage/*
       2 triage/00bbe47a7af460fcd2beb72772965e2c3fcff93a91043f0d74ba33c92939fe9d.elf.x86.triage
       1 triage/0cb8d3af19c50201db3a63329d66ff18c3208135a40a237b98886f5d87f706bb.elf.x86.triage
       2 triage/11242cdb5dac9309a2f330bd0dad96efba9ccc9b9d46f2361e8bf8e4cde543c1.elf.m68k.triage
      11 triage/12330634ae5c2ac7da6d8d00f3d680630d596df154f74e03ff37e6942f90639e.elf.arm.triage
      17 triage/190333b93af51f9a3e3dc4186e4f1bdb4f92c05d3ce047fbe5c3670d1b5a87b4.elf.sparc.triage
      12 triage/1ae62dbec330695d2eddc7cb9a65d47bad5f45af95e6c8a803f0780e0749a3ad.elf.x86.triage
       2 triage/1d7a1de17c3d67b07dbaea9fb157c2c4fde1c9cdcf5f6883eb523e2037036725.elf.ppc.triage
       1 triage/1fc34eb182476d9c94fee20914ae72275349d8e4085c9e230441de412ada903c.elf.sparc.triage
       5 triage/27c1a20a1cfe561a2ba24b1af9e63bd227136583c9ac055bd74faf5661277fef.elf.x86.triage
      17 triage/28a15d8422c5f7359c28cb17614228082e88bfcd73749e1eb70c4114fde6fd9e.elf.sh.triage
       1 triage/2aedc2b26e8e67c745d3e2008645edd270f12b56d15530a1117c672e454f19a9.elf.x86.triage
      21 triage/2c27dea059cc2664bcbb53cfc9c2410450e920c009aaa0d95d8b650125bc8119.elf.arm.triage
       1 triage/2ca6de172e2ab820e486fc0aabfafbcf83b5c8efe01477785d969d6f6db2a6a3.elf.sh.triage
       1 triage/2d0903a1e3c83a7467fbedd9dac0da1277f41097059ad1cab5228a83cc052adb.elf.m68k.triage
       1 triage/4076f217b7c9f20a247590d48f4b8f9e31c8b967b75580a46e4d4b5c8fc7b5f3.elf.arm.triage
      67 triage/40e8d9d82800728a5f1cfc2c2e156d5ee72fb44c54c26a86cfd35e95ea737e37.elf.x86_64.triage
     103 triage/46d8fb0b1e46ff8ee0d65697080af8f7ee11d0a741ae0ca662aedad63a716ebd.elf.x86_64.triage
      24 triage/50ac4fcd3fbc8abcaa766449841b3a0a684b3e217fc40935f1ac22c34c58a9ec.elf.mips.triage
       8 triage/53cc849f32a5a4f0eba71f8edfe08863d706828bcc94210af9c6ebe29bd368f2.elf.tens.triage
       8 triage/557278a66fd4227f27a03e59f8ff7856df27974175894333ec35293f2ebed52a.elf.arm.triage
      10 triage/5ba7c0bed700d5b01363bd877b3cb6b91def34ce3c96a78ea4dfa6454badc77b.elf.x86.triage
       1 triage/63ad24bb4a28cbd6285757dfd899895e72c52b692c305678b332b215bcd19c5e.elf.x86.triage
      11 triage/65008bbc4f6bb15396fb582015e25c213727a9e4dce8996b43ab11021b295e9c.elf.arm.triage
      18 triage/949c3704f0594164130e04dc8b370c04bbc31fb4dfe0e0f7ff9f24f75741f9a3.elf.arm.triage
      16 triage/97ef8e32fc31c1ac26933df49c970baa6cba6cb761dc51a04042222d7a755804.elf.x86.triage
      12 triage/980fd1e947a8dd578c45bc76254b6aaa95b35e6ec33b8f41da268623500bd0f1.elf.mips.triage
       4 triage/a138a37fb5cf9154abaf49f729fd7efd0d4c7d970727bfaa4db5d47d0327e910.elf.x86_64.triage
      11 triage/a488ca696ff0e5b0173c113b675305611f8f27402812b7c4ce68c474eb5b0f92.elf.m68k.triage
       2 triage/a53ce99ee433c76d4595e7712b9195303ea5044f05d0f01f140402ef60a1b29a.elf.sparc.triage
       1 triage/a7e544e6b92549e4b2d09ca569119e4203009cd539f11d8712fa9b3440c0a061.elf.sparc.triage
       8 triage/ad2a93a62eebb332350459ffe36a959b14699882e748715e8d2054eea06d0ef2.elf.x86_64.triage
       9 triage/afeb9fe2fdac3496df3009e6393028f20a6cf4fe6d375ec2704f8d947bcab64e.elf.ppc.triage
       9 triage/b56dae9168eb5179fbc7ffa88ae94778f7507693077e700b035bfbba68c7eb91.elf.arm.triage
       2 triage/b5bb7be59102b771974777202d04b3357cddec89f34fe1c82b4d394c015b1e23.elf.arm.triage
       9 triage/b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605.elf.mips.triage
       9 triage/b7bf6b51c795e85d1bd501a5bcd589fca224347d1e2c3f59d10bd9e76e889e61.elf.mips.triage
       2 triage/b802eb9e5babb113273e4e83a80592da7a2cc6239c51406afe3ee2632ba76a4c.elf.ppc.triage
       9 triage/be73d8c570224796e6b78698c64b2b921af29146ab241efbfe066d168e66755b.elf.x86.triage
      11 triage/bf94f0cabff75a9d0507e0b2132e679b03ee58e951a9e5063dd3612faac1473f.elf.arm.triage
      10 triage/c136bba7cf27e8a6a00019c2b568836ae872c89e471b94cb8d0d56a328fff52f.elf.m68k.triage
       2 triage/c1b61bd3cf3394d5d1eae8f41c02def479badfb2650436c535f11a66aa53ad13.elf.sparc.triage
       6 triage/c493b42168323e2087025845c91274dabaefa70be951eac08746d4b7e900d627.elf.arm.triage
      23 triage/c88cd52fd894246bccc4991409dd15ec6c024d995819c81c3eb3c5639caf9f3d.elf.arm.triage
       2 triage/cc5bd4c03252e2e3237583e99ac105bc516d13b4085ea0febc98b545a8be55f8.elf.sparc.triage
       1 triage/cf33b914e0f5398f2cbdfbabd9043b167a2fb99793899f5e31c3ce7d3d1a3184.elf.x86.triage
      11 triage/d42622c2b10c454d635fa1f4dd756fc10f01536dbc5f278275940819b0a21cdb.elf.sparc.triage
      11 triage/d5230c95c4af4e1fcddf9660070932b7876a9569dc3a2baedf762abbe37b1ad5.elf.ppc.triage
       9 triage/d7deee97387afcccb83364647d81495e698bad837d68dc52dd9574ab35a9e3ea.elf.mips.triage
      11 triage/d973392cc4ef8447ce4ba61ece69a601df90237f468d85604ae1b79a19a9691f.elf.mips.triage
       6 triage/d9bff535188f70106d4dbd685817aaf822329ee5bd51376fdcd44ae52f0e32a0.elf.arm.triage
      28 triage/da20bf020c083eb080bf75879c84f8885b11b6d3d67aa35e345ce1a3ee762444.elf.x86_64.triage
       6 triage/da2c7fdbf2cea74622400e7614f4ac22f40c3b90a41789597ad59ade2e251209.elf.arm.triage
      11 triage/dc0038eb088b302822c38e3a00f414b34dec7a2ba9aa1beece50e9b6dce90578.elf.arm.triage
       9 triage/ddb4b835d075856af3858f6efcfd4d5ae4f8930ba4185ed735de327e50b2ee8b.elf.m68k.triage
       4 triage/de1f3669a6fd0db279f74eeef5c7e1cf3465e64fd261db21a4cdc4d7d89ccb5d.elf.x86.triage
       5 triage/e41ab4903ed341ac3bf50d9fa5259da10885d6cc2b03edb9b43eb4342314e9ed.elf.arc.triage
       9 triage/e43a1296183c12af65e8875bd37dafc8ab60499becd4d96f469870ad9b39c6b5.elf.sparc.triage
      18 triage/ea1c07ad724e91e7e0f6f1c8b16c70869cc3790bd827f1bf25b8b0189ad41c61.elf.arc.triage
       3 triage/eae29e43b39b2bc6876d21ab7a91ec0d91a3a7a3f46ce49f3d8ad312dd8f46d4.elf.arm.triage
       3 triage/f2c01343ad399e28256ce665c4580a7729189a628d1380423b31f605dfb24a22.elf.mips.triage
      11 triage/f62a2820c5300a715c4624fc607d933421d8d3157a46b6712e94c01bb46d894a.elf.arm.triage
      11 triage/faa0deaba42ba76192609c5d2f59664e871c7bc68ebb5d99c91bf8ea4ddb8ea5.elf.mips.triage
       3 triage/fbcc2654899c5c526850fb6d4d6b42bdc4e9e2ea80a60d6fa072581362bfad02.elf.x86.triage
       1 triage/fd190aae8249fb8540dbebd7ccc0c09ef8bd3ff4dabbee8b90ca8413cb6edbbd.elf.arm.triage
       3 triage/ff9226a13cad63f2913d23999825876fa1d26538f2e1157aa29d3130895547a7.elf.x86.triage

Using a modified version of triage-binary.sh which performs the same activity across all the samples...

Unix.Trojan.Mirai$ ./triage-binaries.sh . | grep -v "\(1\)"
[Defense Evasion: LM: Non-persistant Storage]: /var/tmp (2)
[Defense Evasion: LM: Redirection To Null]: /dev/null (47)
[Defense Evasion: LM: Redirection To Null]: ?/dev/null (7)