Sample details: 11289b5f0904018aa16ced96c7301df5 --

Hashes
MD5: 11289b5f0904018aa16ced96c7301df5
SHA1: 562059e4e4e61327d9a949a8d51335b0dd66b69b
SHA256: 5b858495c5828f7216764e7ee159649e9c17327dd826b340568d26c7c7400812
SSDEEP: 48:vja6CffCz5Bwc2je3jyeIpUPf/ocVjW+X8:r22mc2je3jUU3ocs+M
Details
File Type: HTML
Yara Hits
Source
http://jinanlingshi.com/fwrs63tv
Strings
		<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><meta http-equiv="Cache-Control" content="no-store, no-cache, must-revalidate, post-check=0, pre-check=0"/><meta http-equiv="Connection" content="Close"/><script type="text/javascript">function stringToHex(str){var val="";for(var i = 0; i < str.length; i++){if(val == "")val = str.charCodeAt(i).toString(16);else val += str.charCodeAt(i).toString(16);}return val;}function YunSuoAutoJump(){ var width =screen.width; var height=screen.height; var screendate = width + "," + height;var curlocation = window.location.href;if(-1 == curlocation.indexOf("security_verify_")){ document.cookie="srcurl=" + stringToHex(window.location.href) + ";path=/;";}self.location = "/fwrs63tv?security_verify_data=" + stringToHex(screendate);}</script><script>setTimeout("YunSuoAutoJump()", 50);</script></head><body><div style="font-size: 14px; font-family:
;">&#x6B63;&#x5728;&#x4E3A;&#x60A8;&#x8DF3;&#x8F6C;&#x5230;&#x8BBF;&#x95EE;&#x9875;&#x9762;......<br/><br/>&#x5982;&#x679C;&#x60A8;&#x7684;&#x6D4F;&#x89C8;&#x5668;&#x6CA1;&#x6709;&#x81EA;&#x52A8;&#x8DF3;&#x8F6C;&#xFF0C;&#x8BF7;&#x68C0;&#x67E5;&#x4EE5;&#x4E0B;&#x8BBE;&#x7F6E;&#x3002;<br/><br/>(1)&#x8BF7;&#x786E;&#x4FDD;&#x6D4F;&#x89C8;&#x5668;&#x6CA1;&#x6709;&#x7981;&#x6B62;&#x53D1;&#x9001;Cookie&#x3002;<br/><br/>(2)&#x8BF7;&#x786E;&#x4FDD;&#x6D4F;&#x89C8;&#x5668;&#x53EF;&#x4EE5;&#x6B63;&#x5E38;&#x6267;&#x884C;JavaScript&#x811A;&#x672C;&#x3002;<br/><br/>(3)&#x82E5;&#x4F7F;&#x7528;IE&#x6D4F;&#x89C8;&#x5668;&#xFF0C;&#x8BF7;&#x4F7F;&#x7528;IE9&#x53CA;&#x4EE5;&#x4E0A;&#x7248;&#x672C;&#x3002;<br/><br/>(4)&#x786E;&#x4FDD;&#x672C;&#x5730;&#x65F6;&#x95F4;&#x7684;&#x51C6;&#x786E;&#x6027;&#x3002;<br/><br/>(5)&#x8BF7;&#x89C2;&#x5BDF;&#x8FD9;&#x4E2A;&#x65F6;&#x95F4;&#xFF08;2019-02-12 20:55:08&#xFF09;&#x82E5;&#x65F6;&#x95F4;&#x4E00;&#x76F4;&#x672A;&#x53D8;&#x5316;&#xFF0C;&#x5219;&#x662F;&#x7531;&#x4E8E;&#x9A8C;&#x8BC1;&#x9875;&#x9762;&#x88AB;&#x7F13;&#x5B58;&#xFF0C;&#x53EF;&#x80FD;&#x662F;&#x4E0E;CDN&#x8BBE;&#x7F6E;&#x4E0D;&#x517C;&#x5BB9;&#x3002;<br/><br/></<div></body><!--2019-02-12 20:55:08--></html>