- Threat Encyclopedia
- Malicious URL
- http://s339.{BLOCKED}e.com/get/cb31d50f0a86e082dfafb84e78978273a5d1a258/517f8dfd...
BKDR_LIFTOH.DLF received commands from its command-and-control (C&C) server to download WORM_DORKBOT.SME from this URL. It uses the downloaded worm to propagate.