<commit_before># Copyright (c) 2014-2018 <NAME> (@stamparm)
# See the file 'LICENSE' for copying permission

# Reference: https://www.virustotal.com/#/ip-address/77.87.77.250

/izuku.sh
/izuku.arm
/izuku.mips
/izuku.mpsl

# Reference: https://blog.paranoidpenguin.net/2018/08/hakaied-with-love-from-telecom-egypt/

/hakai.mips
/hakai.arm5
/hakai.mpsl
/hakai.x86_64

# Reference: https://researchcenter.paloaltonetworks.com/2018/07/unit42-finds-new-mirai-gafgyt-iotlinux-botnet-campaigns/

/okane.arc
/okane.arm
/okane.arm5
/okane.arm6
/okane.arm7
/okane.i486
/okane.i686
/okane.m68k
/okane.mips
/okane.mips64
/okane.mpsl
/okane.ppc
/okane.ppc440fp
/okane.sh4
/okane.spc
/okane.x86

# Reference: https://www.bleepingcomputer.com/news/security/mirai-iot-malware-uses-aboriginal-linux-to-target-multiple-platforms/

/sora.x86
/sora.mips
/sora.mpsl
/sora.arm4
/sora.arm5
/sora.arm6
/sora.arm7
/sora.ppc
/sora.m68k
/sora.arc
/sora.sh4

# Reference: https://www.hindawi.com/journals/scn/2018/7178164/lst16/

/mirai.arm
/mirai.arm5n
/mirai.arm7
/mirai.dbg
/mirai.m68k
/mirai.mips
/mirai.mipsl
/mirai.ppc
/mirai.sh4
/mirai.spc
/mirai.x86

# Reference: https://www.virustotal.com/en/ip-address/172.16.58.3/information/
# Reference: https://twitter.com/i/moments/1046121581393543168

/Extendo.mips 
/Josho.arm5
/Josho.arm7
/8UsA.sh
/zaky.sh

# Reference: https://twitter.com/bad_packets/status/1036415216718733312

/seraph.arc
/seraph.arm
/seraph.arm5
/seraph.arm6
/seraph.arm7
/seraph.i586
/seraph.i686
/seraph.m68k
/seraph.mips
/seraph.mpsl
/seraph.ppc
/seraph.sh
/seraph.sh4
/seraph.spc
/seraph.x86

# Reference: https://twitter.com/bad_packets/status/1038620066873409536

/apep.arc
/apep.arm
/apep.arm5
/apep.arm6
/apep.arm7
/apep.i586
/apep.i686
/apep.m68k
/apep.mips
/apep.mpsl
/apep.ppc
/apep.sh
/apep.sh4
/apep.spc
/apep.x86
/arm.b
/arm5.b
/arm7.b
/mpsl.b

# Reference: https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/

l.ocalhost.host
/sonicwall

# Reference: https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en/

musl.lib
rippr.cc
ukrainianhorseriding.com
/adbs
/adbs2
/fbot.aarch64
/fbot.arm7
/fbot.mips
/fbot.mipsel
/fbot.x86
/fbot.x86_64
/mipsel.bot.le
/mips.bot.be
/i686.bot.le
/arm7.bot.le
/arm64.bot.le
/x86_64.bot.le

# Reference: https://twitter.com/bad_packets/status/1043273974560448514

/ultron.armv4l
/ultron.armv5l
/ultron.armv6l
/ultron.i586
/ultron.i686
/ultron.m68k
/ultron.mips
/ultron.mipsel
/ultron.mipseln
/ultron.powerpc
/ultron.powerpc440fp
/ultron.sh4
/ultron.sparc
/ultron.x86_64
/ultronfinal.armv4l
/ultronfinal.armv5l
/ultronfinal.armv6l
/ultronfinal.i586
/ultronfinal.i686
/ultronfinal.m68k
/ultronfinal.mips
/ultronfinal.mipsel
/ultronfinal.mipseln
/ultronfinal.powerpc
/ultronfinal.powerpc440fp
/ultronfinal.sh4
/ultronfinal.sparc
/ultronfinal.x86_64
/ultron-syn.sh

# Reference: https://twitter.com/bad_packets/status/1043404764027838464

/hoho.arm
/hoho.arm5
/hoho.arm6
/hoho.arm7
/hoho.m68k
/hoho.mips
/hoho.mpsl
/hoho.ppc
/hoho.sh4
/hoho.spc
/hoho.x86

# Reference: https://twitter.com/bad_packets/status/1032494091290832896

/.shinka.mips
/.shinka.mpsl

# Reference: https://twitter.com/bad_packets/status/1029965235212320768

/x86_64
/x86_32

# Reference: https://twitter.com/bad_packets/status/1029608234569453569

/init0
/sals<commit_msg>Update elf_mirai.txt<commit_after># Copyright (c) 2014-2018 <NAME> (@stamparm)
# See the file 'LICENSE' for copying permission

# Reference: https://www.virustotal.com/#/ip-address/77.87.77.250

/izuku.sh
/izuku.arm
/izuku.mips
/izuku.mpsl

# Reference: https://blog.paranoidpenguin.net/2018/08/hakaied-with-love-from-telecom-egypt/

/hakai.mips
/hakai.arm5
/hakai.mpsl
/hakai.x86_64

# Reference: https://researchcenter.paloaltonetworks.com/2018/07/unit42-finds-new-mirai-gafgyt-iotlinux-botnet-campaigns/

/okane.arc
/okane.arm
/okane.arm5
/okane.arm6
/okane.arm7
/okane.i486
/okane.i686
/okane.m68k
/okane.mips
/okane.mips64
/okane.mpsl
/okane.ppc
/okane.ppc440fp
/okane.sh4
/okane.spc
/okane.x86

# Reference: https://www.bleepingcomputer.com/news/security/mirai-iot-malware-uses-aboriginal-linux-to-target-multiple-platforms/

/sora.x86
/sora.mips
/sora.mpsl
/sora.arm4
/sora.arm5
/sora.arm6
/sora.arm7
/sora.ppc
/sora.m68k
/sora.arc
/sora.sh4

# Reference: https://www.hindawi.com/journals/scn/2018/7178164/lst16/

/mirai.arm
/mirai.arm5n
/mirai.arm7
/mirai.dbg
/mirai.m68k
/mirai.mips
/mirai.mipsl
/mirai.ppc
/mirai.sh4
/mirai.spc
/mirai.x86

# Reference: https://www.virustotal.com/en/ip-address/172.16.58.3/information/
# Reference: https://twitter.com/i/moments/1046121581393543168

/Extendo.mips 
/Josho.arm5
/Josho.arm7
/8UsA.sh
/zaky.sh

# Reference: https://twitter.com/bad_packets/status/1036415216718733312

/seraph.arc
/seraph.arm
/seraph.arm5
/seraph.arm6
/seraph.arm7
/seraph.i586
/seraph.i686
/seraph.m68k
/seraph.mips
/seraph.mpsl
/seraph.ppc
/seraph.sh
/seraph.sh4
/seraph.spc
/seraph.x86

# Reference: https://twitter.com/bad_packets/status/1038620066873409536

/apep.arc
/apep.arm
/apep.arm5
/apep.arm6
/apep.arm7
/apep.i586
/apep.i686
/apep.m68k
/apep.mips
/apep.mpsl
/apep.ppc
/apep.sh
/apep.sh4
/apep.spc
/apep.x86
/arm.b
/arm5.b
/arm7.b
/mpsl.b

# Reference: https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/

l.ocalhost.host
/sonicwall

# Reference: https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en/

musl.lib
rippr.cc
ukrainianhorseriding.com
/adbs
/adbs2
/fbot.aarch64
/fbot.arm7
/fbot.mips
/fbot.mipsel
/fbot.x86
/fbot.x86_64
/mipsel.bot.le
/mips.bot.be
/i686.bot.le
/arm7.bot.le
/arm64.bot.le
/x86_64.bot.le

# Reference: https://twitter.com/bad_packets/status/1043273974560448514

/ultron.armv4l
/ultron.armv5l
/ultron.armv6l
/ultron.i586
/ultron.i686
/ultron.m68k
/ultron.mips
/ultron.mipsel
/ultron.mipseln
/ultron.powerpc
/ultron.powerpc440fp
/ultron.sh4
/ultron.sparc
/ultron.x86_64
/ultronfinal.armv4l
/ultronfinal.armv5l
/ultronfinal.armv6l
/ultronfinal.i586
/ultronfinal.i686
/ultronfinal.m68k
/ultronfinal.mips
/ultronfinal.mipsel
/ultronfinal.mipseln
/ultronfinal.powerpc
/ultronfinal.powerpc440fp
/ultronfinal.sh4
/ultronfinal.sparc
/ultronfinal.x86_64
/ultron-syn.sh

# Reference: https://twitter.com/bad_packets/status/1043404764027838464

/hoho.arm
/hoho.arm5
/hoho.arm6
/hoho.arm7
/hoho.m68k
/hoho.mips
/hoho.mpsl
/hoho.ppc
/hoho.sh4
/hoho.spc
/hoho.x86

# Reference: https://twitter.com/bad_packets/status/1032494091290832896

/.shinka.mips
/.shinka.mpsl

# Reference: https://twitter.com/bad_packets/status/1029965235212320768

/x86_64
/x86_32

# Reference: https://twitter.com/bad_packets/status/1029608234569453569

/init0
/sals

# Reference: https://twitter.com/Ajouini99/status/1046898647764545536

/Boatnet.arm4
/Boatnet.arm5
/Boatnet.arm6
/Boatnet.arm7
/Boatnet.m68k
/Boatnet.mips
/Boatnet.mpsl
/Boatnet.ppc
/Boatnet.sh4
/Boatnet.spc
/Boatnet.x86
/Boatnet.x86_64
{'fraction_non_alphanumeric': 0.1541719610334604, 'fraction_numerical': 0.10729916701962446, 'mean_word_length': 3.8321964529331516, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 33, 'lorem ipsum': 0, 'www.': 8, 'xml': 0}, 'pii_count': 4, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1194842', 'n_tokens_mistral': 3999, 'n_tokens_neox': 3492, 'n_words': 404}