http://{BLOCKED}181.50:81

BKDR_BLYPT.A connects to this URL to send and receive commands from a remote malicious user. This backdoor is a variant of the malware family BLYPT. It uses binary large objects (BLOB) to store information in the affected system's registry. It also utilizes encryption.