Analysis date (UTC): 10 February 2026, 03:17Analysis environment: Ubuntu 22.04.2

iran.x86_64

MD5:92DF90D8F0C02907BB5FFFC14F1AFD0E
SHA1:06B1DD1C9B86BB66AA5E849D51DA37D125B823ED
SHA256:8EA72CA9DBB751BCC965CA4513AFE9820860FB02B4719EE46242CF1CB0D68F11

Analysis result

Behavior activities

MALICIOUS

MIRAI has been detected (SURICATA)

  • iran.x86_64.elf (PID: 1861)

GAFGYT has been detected (SURICATA)

  • iran.x86_64.elf (PID: 1861)

SUSPICIOUS

Modifies file or directory owner

  • sudo (PID: 1854)

Contacting a server suspected of hosting an CnC

  • iran.x86_64.elf (PID: 1861)

INFO

No info indicators.

Threats

PIDProcessClassMessage
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Mirai.Gen CnC packet outbound
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed
1861iran.x86_64.elfMalware Command and Control Activity DetectedBOTNET [ANY.RUN] Linux/Gafgyt.Gen CnC beacon observed

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN