See this Citadel Cybercrime site: https://www.virustotal.com/nl/url/8856a381be8c772f050c16b1b01ca2c2adf77762c7b85f785b7664946d0d47b0/analysis/1393541226/ and https://www.virustotal.com/nl/file/af47ec90f9b69ce21c23de705be61f809bdfb30c5d9b6675466fd21f4b07b48d/analysis/1379944202/ See: https://malwr.com/analysis/NDAxMDZmMDc4YjYxNDI2NjlkYjEwM2Q3OThlNDQ1YzI/ also listed here: http://vxvault.siri-urz.net/ViriList.php
polonus