Sample details: 6b55650b163f770a703f30c6c4db7972 --

Hashes
MD5: 6b55650b163f770a703f30c6c4db7972
SHA1: 380daf7409314c155e33d88343d827b4aa93d7cd
SHA256: fcc1a8180089c205f8cecf0db23566a9a62191bc0fef18fd0b939dbd3ccfa5af
SSDEEP: 12:4tYDsMcpfJm+6jcD0FrimqJmr5t7fJm+6jcD0FrqdJA7Fz4AEdeRmral0wcFzHQL:WusM2fJm+6dC4t7fJm+6dqvARNEIvlCg
Details
File Type: HTML
Yara Hits
Source
http://rnicrosoft.cf/2.exe
Strings
		<html> 
  <head>
    <title>rnicrosoft.cf</title>
    <meta http-equiv="refresh" content="1; URL=http://domain.dot.tk/p/?d=RNICROSOFT.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549960547323"/>
    <script type="text/javascript">
    <!--
      function redir(){ var $fwd = 'http://domain.dot.tk/p/?d=RNICROSOFT.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549960547323'; if(window.parent){ window.parent.location=$fwd; }else{ window.location=$fwd; }}
    //-->
    </script>
  </head>
  <body onload="redir()">
    <script language="text/javascript">
    <!--
      window.setTimeout('redir();', 50 * 1);
    //-->
    </script>
  </body>
</html>