Vampire Bot Persistence Using Attrib

Detects the Vampire Bot malware establishing persistence by copying itself to a suspicious directory and using 'attrib.exe' to set system and hidden file attributes.