freegamebox.ru (Betabot http botnet proxied by cloudflare.com)

Server:  freegamebox.ru
Gate file:  /hunter/123/order.php

The same gate directory has shown up before.

Related md5s (Download samples from Malwr.com)
Betabot: e6e0b46fbb5741b058e3c9b84f601a7f