Analysis by: Kenneth Guang Zheng Lee
 URL BLOCKING DATE/TIME: 30 Apr 2013 09:45:00 AM GMT-8
 RATING: HIGH
 DOMAIN: hotfile.com
 CATEGORY: Disease Vector
 DESCRIPTION:

BKDR_LIFTOH.DLF received commands from its C&C server to download WORM_DORKBOT.SME from this URL. It uses the downloaded worm to propagate.