# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.malwaretech.com/2014/12/phase-bot-fileless-rootki.html
# Reference: https://www.malwaretech.com/2014/12/phase-bot-fileless-rootkit-part-2.html
# Reference: https://www.virustotal.com/gui/file/3a9f8f9dc215be8bc8d278ab99f5e6bdac2d1732d4a3b536d55696dfe766491a/detection
# Reference: https://www.virustotal.com/gui/file/438258d0710ddbb280a5a1ed801392a5194eaece16ba85591fe5eb4815bf56a8/detection

phasesupport.com

# Generic

/phase/gate.php
/pos/gate.php
/pos/scan32.bin