Backdoor

Backdoor.Linux.Mirai information

Malware Removal

The Backdoor.Linux.Mirai is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Linux.Mirai virus can do?

  • Injection (inter-process)
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

How to determine Backdoor.Linux.Mirai?


File Info:

crc32: B9ACC733
md5: 92defd440acfd41595ce20c9107c3262
name: tmp5wy1bocu
sha1: a1bf229c5351224fc972569bf6adcf7b44860c3d
sha256: e3ee24ce5e90ceeeb100163ae760ffa77844bbf8c37de87fed1840c5fe2404ab
sha512: 975661e5ab54677e8d0c7a1820c95e5c26cb01c08452bb4573fd09b93f71049a65ff8b5779b82045f65771bd80b78e1064a9143594889831253db551aafc1340
ssdeep: 384:rNy7yLLZg2ANEiginnwaOCD3FFV9uFHZC9RHetkon:pymLLG2ABgyO4FFrkHZWlho
type: ELF 32-bit LSB executable, ARM, version 1, statically linked, stripped

Version Info:

0: [No Data]

Backdoor.Linux.Mirai also known as:

MicroWorld-eScanTrojan.GenericKD.42202203
FireEyeTrojan.GenericKD.42202203
ALYacBackdoor.Linux.Mirai
SymantecTrojan.Gen.NPE
TrendMicro-HouseCallTROJ_GEN.R011C0DEP20
AvastELF:Gafgyt-AN [Cryp]
ClamAVUnix.Malware.Agent-7501536-0
GDataTrojan.GenericKD.42202203
BitDefenderTrojan.GenericKD.42202203
ViRobotLinux.S.Agent.13032
AegisLabTrojan.Linux.Generic.4!c
Ad-AwareTrojan.GenericKD.42202203
SophosMal/Generic-S
TrendMicroTROJ_GEN.R011C0DEP20
McAfee-GW-EditionGenericRXJK-IO!92DEFD440ACF
EmsisoftTrojan.GenericKD.42202203 (B)
JiangminBackdoor.Linux.dzom
MicrosoftTrojan:Win32/Casdet!rfn
ArcabitTrojan.Generic.D283F45B
AhnLab-V3Linux/Truncpx.27512
Avast-MobileELF:Gafgyt-AN [Cryp]
McAfeeGenericRXJK-IO!92DEFD440ACF
MAXmalware (ai score=87)
FortinetELF/Gafgyt.AN!tr
AVGELF:Gafgyt-AN [Cryp]
Qihoo-360Linux/Trojan.974

How to remove Backdoor.Linux.Mirai?

Backdoor.Linux.Mirai removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment