Prinimalka

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Prinimalka
Alias	Ursnif
Group	Banking
Parent	Gozi
Sibling	Dorifel
Family
Relations	Variants: Sibling of: Parent of: Neverquest Distribution of: Campaigns:
Target	Microsoft Windows
Origin
Distribution vector
UserAgent
CCProtocol
Activity	2008 /
Status
Language
Programming language
Operation/Working group

Checksums / AV databases

• 09f75a3fcaeb2c46dd67b666a109d844 | Virustotal

• c89e960e0155bd9c78889b415de82f55 | Virustotal

• a8bc29c5ae35a634adbe63d43a2efaab | Virustotal

• e4065c9aa45afc54003ca2d7ae6f15f1 | Virustotal

• ca54385bb345f20454ec0cd1f01ca9f9 | Virustotal

Publications

	Author	Editor	Year
Cyber gang seeks botmasters to wage massive wave of trojan attacks against U.S. banks	Mor Ahuvia	RSA	2012
Probing the Gozi-Prinimalka campaign	Ivan Macalintal	Trend Micro	2012
Trojan.Prinimalka: bits and pieces	Dennis Schwarz	Arbor Networks	2012
Vawtrak gains momentum and expands targets	Don Jackson	PhishLabs	2014
‘Project Blitzkrieg’ promises more aggressive cyberheists against U.S. banks	Brian Krebs	Brian Krebs	2012