DROPBOX phish running on faithway[.]church

Found: 2018-03-21 00:18:31.527000
URL: http://faithway.church/wropboxp.zip
File: faithway.church-foo-wropboxp.zip
Domain: faithway.church
Target: DROPBOX
Name                                               Size Date                 MD5                                wropboxp/wropboxp/asset/ajax-loading-small-vfl3Wt7C_.gif  1737 2016-05-25 13:42:54  dd6b7b0bf5c3af22499abc0a9ee1e1b2
    File appears in 257 kits  and under 3 different file names
wropboxp/wropboxp/asset/ajax-loading-small@2x-vflAxdZTP.gif  8787 2016-05-25 13:42:54  0317594cf5315ffa11a7060f12e77638
    File appears in 262 kits  and under 4 different file names
wropboxp/wropboxp/asset/animation-vflzHcTyC.css      537 2016-05-25 13:42:54  cc7713c829f9ce536c471fd215c11040
    File appears in 248 kits
wropboxp/wropboxp/asset/aol.png                     2466 2016-05-25 13:42:54  155df79eb51f2b0800b7c5a970c2ddd0
    File appears in 244 kits
wropboxp/wropboxp/asset/base-vflQGhUQE.css         23490 2016-05-25 13:42:54  dbce5adb83e61a7c840476a8fe685f84
    File appears in 244 kits
wropboxp/wropboxp/asset/components-vflfxQtKp.css   64174 2016-05-25 13:42:54  7f142d2a92c1f1487c42fcf08b776803
    File appears in 246 kits
wropboxp/wropboxp/asset/css.css                     1016 2016-05-25 13:42:54  7bf73fd295afe35766eba38af0c4385a
    File appears in 245 kits
wropboxp/wropboxp/asset/dismiss-cross-vflIlGysZ.svg   368 2016-05-25 13:42:54  2251b2b192bebb21ec1c4dfb7a4de639
    File appears in 245 kits
wropboxp/wropboxp/asset/docs-anywhere-vflA67DXc.png  7377 2016-05-25 13:42:54  03aec35dc27ede21653b3b01843828ba
    File appears in 241 kits
wropboxp/wropboxp/asset/dropbox_logo_glyph_2015-vfl4ZOqXa.svg  1031 2016-05-25 13:42:54  1f00c8d7fbffef1c69691c917f525f80
    File appears in 243 kits
wropboxp/wropboxp/asset/dropbox_logo_text_2015-vfld7_dJ8.svg  2692 2016-05-25 13:42:54  3ddde6715bc6ab253d527e22f1b314fc
    File appears in 242 kits
wropboxp/wropboxp/asset/favicon.ico                 6518 2016-05-25 13:42:54  9391620020d44c78b0dc51abbcd151a0
    File appears in 705 kits  and under 5 different file names
wropboxp/wropboxp/asset/gmail.jpg                   2449 2016-05-25 13:42:54  addcb559cee69f7c0818cfe02dd3f1d4
    File appears in 722 kits  and under 5 different file names
wropboxp/wropboxp/asset/hero-intro-bg-vflMdtS9d.jpg 1805311 2016-05-25 13:42:56  31db52f5dd6370aab9a59e72d85b86c9
    File appears in 239 kits
wropboxp/wropboxp/asset/hero-loop-bg-vflsg8hml.jpg 735166 2016-05-25 13:42:56  b20f219a5b132f9755477cfaee34082a
    File appears in 239 kits
wropboxp/wropboxp/asset/hero-poster.png            75430 2016-05-25 13:42:56  d6064e01deb163fdb24daac63ce78287
    File appears in 245 kits
wropboxp/wropboxp/asset/hotmail.png                 5104 2016-05-25 13:42:56  4901cfc069f5d64ec8d47550486cb420
    File appears in 574 kits  and under 5 different file names
wropboxp/wropboxp/asset/icon_spacer-vflN3BYt2.gif     55 2016-05-25 13:42:56  377058b768302462a7348edf12e4dd3e
    File appears in 292 kits  and under 2 different file names
wropboxp/wropboxp/asset/index-vfl0GyzuL.css        21603 2016-05-25 13:42:56  d06cb3b8b7fea292574fd692de8d7d7d
    File appears in 246 kits
wropboxp/wropboxp/asset/jquery.js                  93100 2016-05-25 13:42:56  e0e0559014b222245deb26b6ae8bd940
    File appears in 248 kits  and under 2 different file names
wropboxp/wropboxp/asset/locale_selector-vflRu24eh.css  1892 2016-05-25 13:42:56  46edb87a172de912c7baf29a0c4ac47a
    File appears in 240 kits
wropboxp/wropboxp/asset/media_text-vfl6jBpfO.css    4326 2016-05-25 13:42:56  ea30697ce1fdeb9e67dd5774bc122edf
    File appears in 246 kits
wropboxp/wropboxp/asset/modal-vflS6pGZb.css        12153 2016-05-25 13:42:56  c1aa8bdb57713ed8aa3c10c143074374
    File appears in 246 kits
wropboxp/wropboxp/asset/other.jpg                  12762 2016-05-25 13:42:56  28ca094cffa08d33ee71610ce3ed1fad
    File appears in 571 kits  and under 3 different file names
wropboxp/wropboxp/asset/responsive_classes-vflX9R-EH.css   346 2016-05-25 13:42:56  5fd47e10751a507be7ecb53519221481
    File appears in 248 kits
wropboxp/wropboxp/asset/web-sprites.css            105253 2016-05-25 13:42:56  7f981e9c5eb3cd9ab38a76688f015a5f
    File appears in 240 kits  and under 2 different file names
wropboxp/wropboxp/asset/yahoo.png                   3066 2016-05-25 13:42:56  6919fd582e1387e697f8e772008530db
    File appears in 261 kits  and under 3 different file names
wropboxp/wropboxp/block.php                         1944 2017-01-26 05:05:16  b2c7812eb12023dce22aa7a2a5de94a6
    File appears in 9 kits
wropboxp/wropboxp/index.php                          280 2017-01-16 06:27:28  9cf60541156440ecb7e83354ffb81dab
    File appears in 17 kits
wropboxp/wropboxp/login.html                       12344 2016-05-25 13:42:56  88e63e51f38a69ccdac8180a81fb4ed9
    File appears in 187 kits  and under 4 different file names
wropboxp/wropboxp/process.php                       1791 2018-02-13 20:39:54  2a598aeaa48f63bd268fa98b4b74b66c
    File appears in 2 kits
wropboxp/wropboxp/robot.txt                           26 2016-05-25 13:42:56  f71d20196d4caf35b6a670db8c70b03d
    File appears in 215 kits  and under 2 different file names

1 Email addresses found:
    diamart574@gmail.com (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total