ICCI Bank phish ** running on sgmoneycollections[.]com

Found: 2018-02-22 14:23:53.249000
URL: https://sgmoneycollections.com/Updatesession.zip
File: sgmoneycollections.com-foo-Updatesession.zip
Domain: sgmoneycollections.com
Target: ICCI Bank
Name                                               Size Date                 MD5                                Updatesession/Bankaway/ee/cred.php                   675 2018-01-02 21:54:42  94e557e29afd0ed9b6248a50bf9954c5
Updatesession/Bankaway/ee/credentials.html          5900 2017-12-26 14:47:38  23878ee5035f1b00ad31067013e99fc4

Updatesession/Bankaway/ee/dc.php                     775 2018-01-02 21:54:18  32c9340c4448954d1ce5121e4fa526b9
Updatesession/Bankaway/ee/debitcard.html            4926 2017-12-26 14:47:38  ba0222232cbdfffbf521b11ac2ab4fd3

Updatesession/Bankaway/ee/img/best 2.png           116857 2017-12-26 14:47:38  e865f79ca7309086c17b26dab32d72ec

Updatesession/Bankaway/ee/img/best.png             124880 2017-12-26 14:47:38  b286c20bd7ded1a00a23aac56c2e5752

Updatesession/Bankaway/ee/img/btn_login.gif         1249 2017-12-26 14:47:38  7c885196f8e4be482ab9dcd6853491c6

Updatesession/Bankaway/ee/img/favicon.ico           1150 2017-12-26 14:47:38  66f813e7db4a0c1775acce951f437acf

Updatesession/Bankaway/ee/img/ibd.png              149484 2017-12-26 14:47:38  bf3e05f0d2b9e4f7b46c82522a2911bf

Updatesession/Bankaway/ee/img/iciccacc.png         12611 2017-12-26 14:47:38  9b33395164bd4727f8dafeea4a489394
    File appears in 12 kits
Updatesession/Bankaway/ee/img/icici.png            32998 2017-12-26 14:47:38  66ceb63a0cc4ac28c59d81410ff9d225

Updatesession/Bankaway/ee/img/login.png             3036 2017-12-26 14:47:38  cb2a98ff0fb5bdb0533f971fcc11dea3

Updatesession/Bankaway/ee/index.php                  105 2017-12-26 14:47:38  285f4448ca2096499a09a48d713b55e5

Updatesession/Bankaway/ee/no.php                    3584 2017-12-26 14:47:38  0e768b71a53f685ceaa00de308ce5a41

Updatesession/Bankaway/ee/val.php                    435 2018-01-02 21:53:38  8975b3635d1823e072ac8acfe23e5030
Updatesession/Bankaway/ee/validate.html             1635 2017-12-26 14:47:38  06c7f977f60e1b46d9d1b018371bcb47

Updatesession/Bankaway/index.php                     590 2017-12-26 14:47:38  0587108ca92efb41e0bbc99b79cdfc75

Updatesession/Bankaway/no.php                       3584 2017-12-26 14:47:38  0e768b71a53f685ceaa00de308ce5a41


1 Email addresses found:
    jamesbright0067@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total