user@threatcheck.sh ~ threat-analysis
bash
$ analyze-threat Trojan:Linux/Mirai!pz
Trojan:Linux/Mirai!pz - Windows Defender threat signature analysis

Trojan:Linux/Mirai!pz - Windows Defender Threat Analysis

$ cat analysis.txt
=== THREAT ANALYSIS REPORT ===
Threat Name: Trojan:Linux/Mirai!pz
Classification:
Type:Trojan
Platform:Linux
Family:Mirai
Detection Type:Concrete
Known malware family with identified signatures
Suffix:!pz
Packed or compressed to evade detection
Confidence:Very High
False-Positive Risk:Low

Concrete signature match: Trojan - Appears legitimate but performs malicious actions for Linux platform, family Mirai

Summary:

This is a concrete detection for a trojan from the Mirai malware family, which targets Linux-based systems and IoT devices. The malware infects devices by exploiting weak or default credentials, enrolling them into a botnet used to conduct large-scale Distributed Denial of Service (DDoS) attacks.

Severity:
Critical
VDM Static Detection:
No detailed analysis available from definition files.
Known malware which is associated with this threat:
Filename: boatnet.arm7
f884e31a8847ba08ca7ca56207685738019410f76ad3bdcaa6e3f15fcd077e40
29/05/2026
→VirusTotal↓Download Sample
Filename: boatnet.arm7
51ded53ada4aa9512fbd980e2e8f963a747e36c0e882dacb0919ee42c47f13c1
26/04/2026
→VirusTotal↓Download Sample
Filename: boatnet.arm7
c1ef7ba6ac632d417af3b23f525470142b435a0e15130869e6c945ec7171d862
24/04/2026
→VirusTotal↓Download Sample
Filename: boatnet.arm7
0675ca71db315237e815ef3f7f6aa02254b6ca8211f7743b85d80c968b5a52b8
19/04/2026
→VirusTotal↓Download Sample
Filename: boatnet.arm7
c6f3572fb3b09ac52f2412b661cce6e0b3be48ff3831eb9ffac788ea8a149129
05/04/2026
→VirusTotal↓Download Sample
Remediation Steps:
Quarantine and remove the detected file. Identify the source of the file (e.g., WSL, Docker image, network share) and isolate the associated Linux system or IoT device. Change all default or weak credentials on network-accessible Linux systems and IoT devices and scan them for further compromise.
=== END REPORT ===
$ reanalyze-threat
This analysis was last updated on 12/11/2025. Do you want to analyze it again?
$ ls available-commands/
→ cd /home
user@threatcheck.sh:~$ ▊