Sample details: 43b1e1eb6500c3eb07c97e40f1ac807f --

Hashes
MD5: 43b1e1eb6500c3eb07c97e40f1ac807f
SHA1: cea7a011363fa9769b12a3a9b0663abcb9e5be13
SHA256: 78543ce78fe45fb2b31fed3ddade372fec943bce8d1793cc3f33b670cb11460f
SSDEEP: 12:4DwXMcpfJqwRjcD0FrMmqJmr5t7fJqwRjcD0FrGJA7Fz4AEdeRmral0wcFzHQL:TXM2fJJRdY4t7fJJRdQARNEIvlCg
Details
File Type: HTML
Yara Hits
Source
http://lokipanelhosting.ga/nnamdibin/cryptednnamdi.exe
Strings
		<html> 
  <head>
    <title>lokipanelhosting.ga</title>
    <meta http-equiv="refresh" content="1; URL=http://domain.dot.tk/p/?d=LOKIPANELHOSTING.GA&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549940874946"/>
    <script type="text/javascript">
    <!--
      function redir(){ var $fwd = 'http://domain.dot.tk/p/?d=LOKIPANELHOSTING.GA&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549940874946'; if(window.parent){ window.parent.location=$fwd; }else{ window.location=$fwd; }}
    //-->
    </script>
  </head>
  <body onload="redir()">
    <script language="text/javascript">
    <!--
      window.setTimeout('redir();', 50 * 1);
    //-->
    </script>
  </body>
</html>