Sample details: 6eebea4a8f94fa7ebedd619aec6d4c57 --

Hashes
MD5: 6eebea4a8f94fa7ebedd619aec6d4c57
SHA1: 55c2bff4ef4c245be815bc5ca1a5295d87a91f5d
SHA256: 4b84d72949f565c214a0aefa3c90147f90883742c489a65e1e9d07a8e32290a5
SSDEEP: 12:4tYDsMcpfJm+6jcD0FrrmqJmr5t7fJm+6jcD0Fr3bJA7Fz4AEdeRmral0wcFzHQL:WusM2fJm+6d14t7fJm+6dNARNEIvlCg
Details
File Type: HTML
Yara Hits
Source
http://rnicrosoft.cf/2.exe
Strings
		<html> 
  <head>
    <title>rnicrosoft.cf</title>
    <meta http-equiv="refresh" content="1; URL=http://domain.dot.tk/p/?d=RNICROSOFT.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549984991365"/>
    <script type="text/javascript">
    <!--
      function redir(){ var $fwd = 'http://domain.dot.tk/p/?d=RNICROSOFT.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549984991365'; if(window.parent){ window.parent.location=$fwd; }else{ window.location=$fwd; }}
    //-->
    </script>
  </head>
  <body onload="redir()">
    <script language="text/javascript">
    <!--
      window.setTimeout('redir();', 50 * 1);
    //-->
    </script>
  </body>
</html>