Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: f425b24a58e56448383858a7fb8db471 --

Hashes
MD5: f425b24a58e56448383858a7fb8db471
SHA1: 76acb960ffb41fa53191a1a530a70476d96a63c7
SHA256: e5ea2d56f386e1896172968bfebb693d94362562669f5720f02fad10491589e0
SSDEEP: 12:4bOMcpfJtt1jcD0FrmUgd/mqJmr5t7fJtt1jcD0FrmUHoJA7Fz4AEdeRmral0wcO:ZM2fJtLdydJ4t7fJtLdYARNEIvlCg
Details
File Type: HTML
Yara Hits
Source
http://tytax.cf/uhgtfrdeswa/c.exe
Strings
		<html> 
  <head>
    <title>tytax.cf</title>
    <meta http-equiv="refresh" content="1; URL=http://domain.dot.tk/p/?d=TYTAX.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549976929250"/>
    <script type="text/javascript">
    <!--
      function redir(){ var $fwd = 'http://domain.dot.tk/p/?d=TYTAX.CF&i=173.254.233.139&c=1&ro=0&ref=unknown&_=1549976929250'; if(window.parent){ window.parent.location=$fwd; }else{ window.location=$fwd; }}
    //-->
    </script>
  </head>
  <body onload="redir()">
    <script language="text/javascript">
    <!--
      window.setTimeout('redir();', 50 * 1);
    //-->
    </script>
  </body>
</html>