On the analysis of the ZeuS botnet crimeware toolkit