Create sysrat.txt
Create sysrat.txt

```After the second DLL is loaded into memory, the first DLL overwrites the IP address for the control server, effectively changing the address the malware will communicate with. This address is hardcoded in the second DLL as 200.200.200.13 and is modified by the first DLL to 223.194.70.136.```
stamparm/maltrail,stamparm/maltrail,stamparm/maltrail,stamparm/maltrail