Is a bot malware?

Could you please clarify the distinction between a bot and malware, and whether or not a bot can be classified as malware? I understand that bots are automated programs designed to perform specific tasks, but how does this differ from malware, which is often designed to harm computer systems or steal sensitive information? Is it possible for a bot to have malicious intentions, or are they typically used for legitimate purposes?