Sample details: 06ef7be5272b5affff78ced0d0ad72d8 --

Hashes
MD5: 06ef7be5272b5affff78ced0d0ad72d8
SHA1: 0f41337d19519a03787d5ff6a243eaab84d34289
SHA256: ca5acbc492bfb96b7d20b6ce4d769efdc4a20e521739bd5e23c55c9d72fa912c
SSDEEP: 48:pOoKZJDQrYpYA1ANbmr1f9SD6XyADs8guuN+6uZx:soKDDuY3A41yss8RCGx
Details
File Type: HTML
Yara Hits
Source
http://birim.org/erg7cbr
Strings
		<!DOCTYPE HTML>
<html lang="tr-TR">
<head>
  <meta charset="UTF-8" />
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  <meta name="robots" content="noindex, nofollow" />
  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />
  <meta name="robots" content="noindex">
  <script type="text/javascript">
	window.onload = function() {
	  netrix_form();
	function netrix_form()
		delete_cookie("__nhlw");
		delete_cookie("__nhuid");
		setCookie('__nhuid', '7ffb112f9f4914e7bd8831a6b8a0fd06', 1);
		var nhuid = getCookie("__nhuid");
		if (nhuid)
			setTimeout(function(){ 
				document.getElementById("ntrx_frm").submit();
			}, 1);
	function getRndInteger(min, max) {
    	return Math.floor(Math.random() * (max - min)) + min;
	function getCookie(cname) {
	    var name = cname + "=";
	    var decodedCookie = decodeURIComponent(document.cookie);
	    var ca = decodedCookie.split(';');
	    for(var i = 0; i <ca.length; i++) {
	        var c = ca[i];
	        while (c.charAt(0) == ' ') {
	            c = c.substring(1);
	        }
	        if (c.indexOf(name) == 0) {
	            return c.substring(name.length, c.length);
	        }
	    }
	    return "";
	function setCookie(cname, cvalue, exdays) {
	    var d = new Date();
	    d.setTime(d.getTime() + (exdays*24*60*60*1000));
	    var expires = "expires="+ d.toUTCString();
	    document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
	function delete_cookie( name ) {
	  document.cookie = name + '=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';
</script>
</head>
<body>
	<img src="/ntrx/load/l.png"/>
	<form action="/ntrx/l/jslo" method="GET" accept-charset="utf-8" id="ntrx_frm">
		<input type="hidden" name="js_lo" value="6e4471ec9a160a1a7f08f440d4431a9f"/>
		<input type="hidden" name="js_answer" value="" id="js_answer"/>
	</form>
</body>
</html>