Analysis by: Kenneth Guang Zheng Lee

 URL BLOCKING DATE/TIME: 02 May 2013 01:25:00 PM GMT-8
 RATING: HIGH
 DOMAIN: hotfile.com
 CATEGORY: Disease Vector
 DESCRIPTION:

BKDR_LIFTOH.DLF received commands from its command-and-control (C&C) server to download WORM_DORKBOT.SME from this URL. It uses the downloaded worm to propagate.