add zbotscan.py plugin

plugin to analyze zbot memory infected