Resolved runawaswarm.ru to 79.174.65.19
Server: runawaswarm.ru
Config file: /xml/config.php
Gate file: /xml/redir.php
Hosting infos: http://whois.domaintools.com/79.174.65.19
Related md5s (search on malwr.com to download the samples):
a9ca2d05060008f988ed72db5eebe67f