PNC BANK phish running on 000webhostapp.com

Found: 2017-11-25 00:15:19.606000
URL: https://secure-pnc-13.000webhostapp.com/PNCLas.zip
File: secure-pnc-13.000webhostapp.com-foo-PNCLas.zip
Domain: 000webhostapp.com
Target: PNC BANK
Name                                               Size Date                 MD5                                PNCLas/PAGE-LOGIN/verification_1/0nline/.htaccess   1533 2014-08-27 02:04:54  758e36fa8a0601bf7e3412e6f412a8bd
    File appears in 109 kits  and under 2 different file names
PNCLas/PAGE-LOGIN/verification_1/0nline/1/details.php 24133 2017-03-09 20:47:26  495e2cbcadb99aa812397b8be1ef597b
PNCLas/PAGE-LOGIN/verification_1/0nline/1/Email.php    67 2017-10-18 03:02:54  29d52845f1d693b09e3a1df090863ca5
PNCLas/PAGE-LOGIN/verification_1/0nline/1/finish.html 11173 2017-09-30 08:39:02  3adf4935411098f8c54bf1f19341d5d7
PNCLas/PAGE-LOGIN/verification_1/0nline/1/functions.php  4482 2016-06-16 01:08:32  d188487244184b6bf629a9fa761f99f9

PNCLas/PAGE-LOGIN/verification_1/0nline/1/hostname_check.php   521 2016-06-16 01:06:10  020f2c620eefe7e9bbd70664ebadeced
    File appears in 36 kits  and under 2 different file names
PNCLas/PAGE-LOGIN/verification_1/0nline/1/index.html 11644 2017-03-09 20:47:46  72530b59a5d7de730aabfe723a5f4991
PNCLas/PAGE-LOGIN/verification_1/0nline/1/log.php    592 2016-07-28 11:54:14  e69137a68a99520ec554a5e14eeb32de

PNCLas/PAGE-LOGIN/verification_1/0nline/1/send.php  1635 2017-09-30 08:38:04  bafed5307926935549f28c9852e380e2
PNCLas/PAGE-LOGIN/verification_1/0nline/index.php    247 2016-06-22 17:52:38  1fcc2d2cf9ce1346acc93a20c22cae57


4 Email addresses found:
    example@domain.com
    f16.yazo@gmail.com
    mr.javac002@gmail.com
    mail@info.com (appears in 2 kits)



https://texasmalwareblog.blogspot.com   @phish_total