https://domain.{BLOCKED}2.us

BKDR_DLDR.A connects to this site to send and receive information and commands from remote attackers. Some of the commands that it can execute include downloading, copying, modifying, creating files and folders, stealing file information, and acquiring time zone information among others. This malware was recently involved in an attack targeting NATO Special Operations Headquarters.