Classification: Malicious
mipsel is a malicious file sample. Reported by 2 threat sources, last seen 2026-05-22. Detected by 42 antivirus engines.
Detection summary
- 42 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Mirai |
Triage |
2026-03-06 01:51:56 |
2026-05-22 18:18:58 |
malicious-activity
|
|
| Mirai |
MalwareBazaar Abuse.ch |
2026-03-06 01:48:30 |
2026-03-06 01:48:30 |
malicious-activity
|
|
Tags
mirai
defense_evasion
discovery
botnet
Sample information
- Filenames
- mipsel, lemonpepper-mipsel, 176.65.139.42_sample.bin, mipsel.elf
- MD5
e91dccd6d2a98519cffd0143d8111a54- SHA-1
ce55c60fcd0bf51daea58c29498919a4fed11403- SHA-256
7b9ba082df5fd5dbcba73175f3bba57ddccef25fce1512c0708367bbd0fb3859- SHA-512
8f7a4cb03fa6aa93aecf9cf64790d63bed088631bd0eb9ea70af74239150924d0ffe048f0a23ac836e5057f11b16f0216babff97ec0af911d9fbeba087593eeb- First indexed
- 2026-03-06 01:48:30
- Last updated
- 2026-09-03 00:30:56
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.Linux.GenericKD.73254 |
| AVG | ELF:Mirai-AXS [Trj] |
| AhnLab-V3 | Linux/Mirai.Gen8 |
| Antiy-AVL | Trojan[Backdoor]/Linux.Mirai |
| Arcabit | Trojan.Linux.Generic.D11E26 |
| Avast | ELF:Mirai-AXS [Trj] |
| Avast-Mobile | ELF:Mirai-CJB [Trj] |
| Avira | EXP/ELF.Mirai.Z.A |
| BitDefender | Trojan.Linux.GenericKD.73254 |
| CTX | elf.trojan.mirai |
| Cynet | Malicious (score: 99) |
| DrWeb | Linux.Mirai.9816 |
| ESET-NOD32 | Linux/Mirai.BC trojan |
| Elastic | Linux.Trojan.Gafgyt |
| Emsisoft | Trojan.Linux.GenericKD.73254 (B) |
| F-Secure | Exploit.EXP/ELF.Mirai.Z.A |
| Fortinet | ELF/Mirai.AT!tr.botnet |
| GData | Trojan.Linux.GenericKD.73254 |
| Google | Detected |
| Kaspersky | HEUR:Backdoor.Linux.Mirai.cw |
| Kingsoft | Linux.Backdoor.Mirai.cw |
| Lionic | Trojan.Linux.Mirai.K!c |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | Trojan:Linux/GenericY.BN |
| MicroWorld-eScan | Trojan.Linux.GenericKD.73254 |
| Microsoft | Backdoor:Linux/Mirai.GC!MTB |
| Rising | Backdoor.Gafgyt/Linux!1.12AC3 (CLASSIC) |
| Sangfor | Suspicious.Linux.Save.a |
| SentinelOne | Static AI - Malicious ELF |
| Skyhigh | Artemis!Trojan |
| Sophos | Linux/DDoS-CI |
| Symantec | Linux.Mirai |
| Tencent | Backdoor.Linux.Mirai.h |
| TrendMicro | Backdoor.Linux.GAFGYT.SMMR3 |
| TrendMicro-HouseCall | Backdoor.Linux.GAFGYT.SMMR3 |
| VBA32 | Trojan.Linux.Mirai.L79.08922d |
| VIPRE | Trojan.Linux.GenericKD.73254 |
| Varist | E32/Mirai.EH.gen!Camelot |
| ZoneAlarm | Linux/DDoS-CI |
| alibabacloud | DDOS:Linux/Mirai |
| huorong | Backdoor/Linux.Mirai.dh |
| ClamAV | Unix.Dropper.Mirai-7135890-0 |