Classification: Malicious
pid.x86 is a backdoor. Detected by 18 antivirus engines. Reported by Triage and MalwareBazaar Abuse.ch, last seen 2026-10-18.
Detection summary
- 18 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Mirai |
Triage |
2026-10-18 05:52:11 |
2026-10-18 05:52:11 |
malicious-activity
|
|
| Mirai |
MalwareBazaar Abuse.ch |
2026-10-18 05:51:43 |
2026-10-18 05:51:43 |
malicious-activity
|
|
Tags
mirai
antivm
botnet
credential_access
defense_evasion
discovery
execution
linux
persistence
privilege_escalation
Sample information
- Filenames
- pid.x86, pid.x86.elf
- MD5
959d9cb48a6c96fc64101e57e7150a8e- SHA-1
af2b76e24f31d5f0b0878c30ba4a0ab33fc9deca- SHA-256
b7d0ea79d512beecf23bf0228648dbc54c9b65aaf60dc1faae91dfb303062d8b- First indexed
- 2026-10-18 05:51:43
- Last updated
- 2026-10-18 06:17:43
Antivirus detections
| Engine | Detection |
|---|
| AVG | ELF:CVE-2021-36260-A [Expl] |
| Antiy-AVL | Trojan[Backdoor]/Linux.Mirai |
| Avast | ELF:CVE-2021-36260-A [Expl] |
| Avast-Mobile | ELF:Mirai-BOH [Trj] |
| Avira | EXP/LINUX.CVE-2021-.A |
| Cynet | Malicious (score: 99) |
| DrWeb | Linux.Mirai.10760 |
| ESET-NOD32 | Linux/Mirai.FIN trojan |
| Elastic | Linux.Exploit.CVE.2018.10562 |
| F-Secure | Exploit.EXP/LINUX.CVE-2021-.A |
| Google | Detected |
| Ikarus | Backdoor.Linux.Mirai |
| Kaspersky | HEUR:Backdoor.Linux.Mirai.mu |
| Rising | Backdoor.Mirai!1.146E0 (CLASSIC) |
| Sangfor | Suspicious.Linux.Save.a |
| SentinelOne | Static AI - Malicious ELF |
| Tencent | Backdoor.Linux.Mirai.wz |
| huorong | Trojan/Linux.Mirai.f |