Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: c50e94abea2152f6c9729d12911addb2 --

Hashes
MD5: c50e94abea2152f6c9729d12911addb2
SHA1: 2c4ebf8ddb1764fea0e7bc8cdeaea6b42ab547ff
SHA256: f36de49e97dddfbd26af7f2bf8417a430aaf0b34a12e14ed06a93721b61ecbc8
SSDEEP: 24:B5nwkspwyQYaVTPkiCE4MZWbuM/ALV9MkHrvbtWsGQFxRtil48gCOqM9qvVIplgF:7nIpwy3ah8MZWbJDkPtLJUl44O9qO+L
Details
File Type: HTML
Yara Hits
Source
http://lijschool.com/87gyub
Strings
		<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="ko" lang="ko"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">body { width:100%; height:100%; } .wrap { position:fixed; top:50%; left:50%; margin:-185px 0 0 -315px; width:630px; height:370px; } h1 {margin: 0 0 20px; font-size: 15pt;}</style></head><body><script type="text/javascript" src="/cupid.js" ></script><script>function toNumbers(t){var e=[];return t.replace(/(..)/g,function(t){e.push(parseInt(t,16))}),e}function toHex(){for(var t=[],t=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",o=0;o<t.length;o++)e+=(16>t[o]?"0":"")+t[o].toString(16);return e.toLowerCase()}function getUrlParams(){var t={};return window.location.search.replace(/[?&]+([^=&]+)=([^&]*)/gi,function(e,o,r){t[o]=r}),t}var a=toNumbers("520d5021b8fc7bf2aa24d547d5b7ebd1"),b=toNumbers("9269286ec0376832b2872ade5ec54daf"),c=toNumbers("27e5d44d3424c0a57003bf334d7d66e7"),now=new Date,time=now.getTime();time+=864e5,now.setTime(time),document.cookie="CUPID="+toHex(slowAES.decrypt(c,2,a,b))+"; expires="+now.toUTCString()+"; path=/",oParams=getUrlParams(),nCkattempt=0,oParams.ckattempt&&(nCkattempt=parseInt(oParams.ckattempt)),nCkattempt<3&&(location.href="http://lijschool.com/87gyub?ckattempt=1");</script><div class="wrap"><div align="center"><h1>
.</h1><p>Please prove that you are human.</p><form action="/___verify" method="POST"><input type="submit" value="  OK  "></form></div></div></body></html>