arrow_back
search
close

http://s339.{BLOCKED}e.com/get/cb31d50f0a86e082dfafb84e78978273a5d1a258/517f8dfd...

May 14, 2013
 Analysis by: Kenneth Guang Zheng Lee
 URL BLOCKING DATE/TIME: 02 May 2013 01:25:00 PM GMT-8
 RATING: HIGH
 DOMAIN: hotfile.com
 CATEGORY: Disease Vector
 DESCRIPTION:

BKDR_LIFTOH.DLF received commands from its command-and-control (C&C) server to download WORM_DORKBOT.SME from this URL. It uses the downloaded worm to propagate.