http://{BLOCKED}9.217.59/system/prinimalka.py/command

November 27, 2012

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Michael Donavan Go

---

 URL BLOCKING DATE/TIME: 22 Nov 2012 02:10:00 PM GMT-8

 RATING: HIGH

 DOMAIN: 213.239.217.59

 CATEGORY: Disease Vector

 DESCRIPTION:

BKDR_URSNIF.DN connects to this site to send and receive commands from a remote malicious user. The said malware monitors specific US banking and financial sites to steal information.

Related Malware

• BKDR_URSNIF.DN