iran.armv5l

Classification: Malicious

iran.armv5l is a malicious file sample. Reported by 1 threat source, last seen 2026-03-06. Detected by 26 antivirus engines.

Detection summary

  • 26 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mirai MalwareBazaar Abuse.ch 2026-03-06 15:16:41 2026-03-06 15:16:41 malicious-activity

Sample information

Filenames
iran.armv5l
MD5
bc162ed909c21c628fd395c2e13480e2
SHA-1
a2514bb7c729e9b3e8d2387b8ffbb7887cac7384
SHA-256
d49640c8ff3ab2bc8654447d6b7dd0bc8af450e4b36cb1d7fc1ef5eb0fe77c68
First indexed
2026-03-06 15:16:41
Last updated
2026-09-20 00:43:24

Antivirus detections

EngineDetection
ALYacTrojan.Linux.GenericKD.73322
AVGELF:Mirai-DDE [Trj]
ArcabitTrojan.Linux.Generic.D11E6A
AvastELF:Mirai-DDE [Trj]
BitDefenderTrojan.Linux.GenericKD.73322
CTXelf.trojan.generic
CynetMalicious (score: 99)
DrWebLinux.DDoS.2637
ESET-NOD32Linux/Mirai.EQR trojan
ElasticLinux.Generic.Threat
EmsisoftTrojan.Linux.GenericKD.73322 (B)
FortinetELF/Mirai.EOB!tr
GDataTrojan.Linux.GenericKD.73322
GoogleDetected
IkarusLINUX.AVF.Bot
KasperskyHEUR:Backdoor.Linux.Mirai.kl
McAfeeDTrojan:Linux/Mirai.EQH
MicroWorld-eScanTrojan.Linux.GenericKD.73322
MicrosoftBackdoor:Linux/Mirai.FO!MTB
RisingBackdoor.Mirai/Linux!1.11724 (CLASSIC)
SangforSuspicious.Linux.Save.a
SymantecLinux.Mirai
TencentTrojan.Linux.Mirai.zntra
VIPRETrojan.Linux.GenericKD.73322
VaristE32/Mirai.DJ.gen!Camelot
huorongTrojan/Linux.Mirai.hf