http://{BLOCKED}lower.net/board/images/start_car.gif

 Analysis by: Jerowin Santillan

 URL BLOCKING DATE/TIME: 24 Nov 2011 12:15:00 AM GMT-8
 RATING: HIGH
 DOMAIN: clickflower.net
 CATEGORY: Disease Vector
 DESCRIPTION:

TROJ_DLDR.HB connects to this URL to download a file and saves it as %System%\{random file name}.dll. This malware is involved in the cyber attacks that targeted specific users in South Korea during March of 2013.