MICROSOFT phish running on juyaco[.]com

Found: 2018-09-20 09:15:37.115000
URL: http://juyaco.com/admin/view/javascript/openbay/onedrive.zip
File: juyaco.com-openbay-onedrive.zip
Domain: juyaco.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                onedrive/onedrive/secure/.DS_Store                  8196 2017-12-21 22:19:16  c37bca6c3e1ca30a7cc2f2c48174008e
    File appears in 5 kits  and under 2 different file names
onedrive/onedrive/secure/AA1.htm                    2315 2017-10-07 03:57:52  db7397e52d06e284c1dcaf143e72c781
    File appears in 22 kits
onedrive/onedrive/secure/AA1.php                     778 2018-09-20 10:18:04  e9b8a3c02a0913974d82e37e88fd1e30
onedrive/onedrive/secure/aol_files/AA1.png         15956 2017-10-05 19:37:46  f67eb075dec30c0757b70178d7f8cc02
    File appears in 118 kits  and under 5 different file names
onedrive/onedrive/secure/css/style.css              6919 2017-10-05 19:19:20  2b99a0514111df728c87f751d8417b6e
    File appears in 33 kits
onedrive/onedrive/secure/g_files/which 2.png        5776 2017-10-05 19:22:48  b67b29fd0babde82586c2dc6375ba888
    File appears in 39 kits
onedrive/onedrive/secure/g_files/which.PNG         23524 2017-10-05 19:22:52  8444cf8e6be42f69bc4aa6ce763d90bc
    File appears in 39 kits
onedrive/onedrive/secure/g_files/which1.png         5407 2017-10-05 19:22:56  503665fa9754456aa2cf5e094cc2eaf7
    File appears in 39 kits
onedrive/onedrive/secure/g_files/which3.png         5462 2017-10-05 19:23:00  d5c47c8381651e27cdfcbd14eacddad8
    File appears in 39 kits
onedrive/onedrive/secure/GGC.htm                    2315 2017-10-07 03:58:24  dff858baf0ae722d23fd18464435dc07
    File appears in 18 kits
onedrive/onedrive/secure/GGC.php                     789 2018-09-20 10:18:42  80c891a642d35354d36aca3b002359dd
onedrive/onedrive/secure/GGN.html                   1666 2017-10-07 03:53:32  783c9789897b16bb4dabdf5fbcf40089
    File appears in 18 kits
onedrive/onedrive/secure/GGP.html                   2311 2017-10-07 03:59:14  24dc836794ab36b223671b20323c61bd
    File appears in 18 kits
onedrive/onedrive/secure/gmail_files/GG1.png       28750 2017-10-05 19:24:14  9100850aaf5a709531a5be25384c8419
    File appears in 84 kits  and under 2 different file names
onedrive/onedrive/secure/images/aol.png             1538 2017-10-05 19:21:08  ea9772b90a517e9c61577bc209ae005e
    File appears in 39 kits
onedrive/onedrive/secure/images/gmail.png           1840 2017-10-05 19:21:12  b3f46ee52c669c94cc5ec9bcc58589a1
    File appears in 39 kits
onedrive/onedrive/secure/images/landing-devices-bg.jpg 199882 2017-10-05 19:20:12  fbeaf13996d872780bda8ca2ad200469
    File appears in 27 kits
onedrive/onedrive/secure/images/mail.png            1694 2017-10-05 19:21:18  34c474722fc5046a7f984c307050365d
    File appears in 41 kits
onedrive/onedrive/secure/images/office.png          1421 2017-10-05 19:21:22  4dfcf323758894583269dcd89e8e562b
    File appears in 41 kits
onedrive/onedrive/secure/images/oneDrive.png       14981 2017-10-05 19:21:26  0687a1330a816d19c12cb00682bfe01d
    File appears in 39 kits
onedrive/onedrive/secure/images/outlook.png         2103 2017-10-05 19:21:30  6ec5d7c8db94bfba6272598af602593a
    File appears in 39 kits
onedrive/onedrive/secure/images/Thumbs.db           4608 2017-10-07 03:42:18  addd754c357a18a5ad4b8e802ad593ff
    File appears in 34 kits  and under 2 different file names
onedrive/onedrive/secure/images/yahooMail.png       1997 2017-10-05 19:21:34  e100951d0b2da8bb50259b7e1ceadbe6
    File appears in 39 kits
onedrive/onedrive/secure/index.php                  2129 2018-01-10 01:00:56  084c2682b6e3a79264f028609557997b
    File appears in 5 kits
onedrive/onedrive/secure/live_files/LL1.png        10776 2017-10-05 19:35:00  6b97ed8cb0dcd102216220231f6b82ba
    File appears in 138 kits  and under 7 different file names
onedrive/onedrive/secure/LL1.htm                    2547 2017-10-07 03:59:38  5e1e928db1a917240496e67305b6ac09
    File appears in 22 kits
onedrive/onedrive/secure/LL1.php                     784 2018-09-20 10:19:24  4b6c0c02731485542971f24620ed5010
onedrive/onedrive/secure/OF.htm                     2556 2017-10-07 03:59:54  ba1688109aa4dd58cf4158244ecba38a
    File appears in 22 kits
onedrive/onedrive/secure/OF.php                     1264 2018-09-20 10:20:26  2400480972b8be1195e57812aea74a2f
onedrive/onedrive/secure/ojomu/OF1.jpg             11286 2017-10-05 19:39:14  910913f953ac7ec23a1746cf90d4e5ad
    File appears in 92 kits  and under 3 different file names
onedrive/onedrive/secure/OT.htm                     2799 2017-10-07 04:00:20  e2db1cfccc36d67b4ff51962eea5dbb5
    File appears in 23 kits
onedrive/onedrive/secure/OT.php                      778 2018-09-20 10:21:08  63bbb6b5b40d55194cc500e219a7ab9b
onedrive/onedrive/secure/other_files/OT.png         7593 2018-01-17 20:30:06  08deb0bac1bece09fc60fd9b565882db
    File appears in 4 kits
onedrive/onedrive/secure/other_files/Thumbs.db     10752 2017-10-05 22:53:42  3b3e5b409d37560b28e1dedcd1610282
    File appears in 34 kits  and under 2 different file names
onedrive/onedrive/secure/phone.php                  1762 2018-07-10 23:45:42  7462cf75869b3b6ad31501158e028c57
onedrive/onedrive/secure/YY.html                    2111 2017-10-07 04:00:38  75070a643c45fce6dbca54c91ba4649e
    File appears in 22 kits
onedrive/onedrive/secure/YY1.htm/Thumbs.db         10752 2017-10-05 23:07:08  a1557eb8baa10b829c438954c5a63394
    File appears in 31 kits  and under 2 different file names
onedrive/onedrive/secure/YY1.htm/YY1.png           12947 2017-10-05 23:07:08  a608a75ecac04f322adf623b1a2382ef
    File appears in 31 kits
onedrive/onedrive/secure/YY1.php                     780 2018-09-20 10:21:44  2a703dbf6d8f0e9648f5e37e7a7bacde

4 Email addresses found:
    moonwor93@yahoo.com
    admin@perkinz.com (appears in 4 kits)
    moonwork93@gmail.com
    wirez@googledocs.org (appears in 198 kits)



https://texasmalwareblog.blogspot.com   @phish_total