# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/) # See the file 'LICENSE' for copying permission # Reference: https://www.malwaretech.com/2014/12/phase-bot-fileless-rootki.html # Reference: https://www.malwaretech.com/2014/12/phase-bot-fileless-rootkit-part-2.html # Reference: https://www.virustotal.com/gui/file/3a9f8f9dc215be8bc8d278ab99f5e6bdac2d1732d4a3b536d55696dfe766491a/detection # Reference: https://www.virustotal.com/gui/file/438258d0710ddbb280a5a1ed801392a5194eaece16ba85591fe5eb4815bf56a8/detection phasesupport.com # Generic /phase/gate.php /pos/gate.php /pos/scan32.bin