Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: cb909f80163413db9df04b6dd07e8d4e --

Hashes
MD5: cb909f80163413db9df04b6dd07e8d4e
SHA1: 40f5e7fa0c1de1f313f162d39d80393987cae6d0
SHA256: f87aa580fe10c5bc560beef0c24215bb6da0bfb242bdac9f80c7078aed1c4843
SSDEEP: 12:4rCJMcpfJG3sjcD0FrNzmqJmr5t7fJG3sjcD0FrNjJA7Fz4AEdeRmral0wcFzHQL:ACJM2fJG3sdz4t7fJG3sdvARNEIvlCg
Details
File Type: HTML
Yara Hits
Source
http://or-truuce.tk/web-obtain/file/wp/zopne/log/shit.exe
Strings
		<html> 
  <head>
    <title>or-truuce.tk</title>
    <meta http-equiv="refresh" content="1; URL=http://domain.dot.tk/p/?d=OR-TRUUCE.TK&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549945950736"/>
    <script type="text/javascript">
    <!--
      function redir(){ var $fwd = 'http://domain.dot.tk/p/?d=OR-TRUUCE.TK&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549945950736'; if(window.parent){ window.parent.location=$fwd; }else{ window.location=$fwd; }}
    //-->
    </script>
  </head>
  <body onload="redir()">
    <script language="text/javascript">
    <!--
      window.setTimeout('redir();', 50 * 1);
    //-->
    </script>
  </body>
</html>