Advertisement
PhishTotal

MICROSOFT phish ** running on limaccount[.]org

Feb 23rd, 2018
430
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.06 KB | None | 0 0
  1. Found: 2018-02-16 16:57:43
  2. URL: http://limaccount.org/kenjcosta.com/9kbtz2rgof2v2pqizkv9bvhofvw9h45idqua9z6yzbphfm55bt9xk35th9pw5p5sohjyswibwbzsnh7oow0jj7tb1rt8jlypcci2emi157c1kk8bip7ygl1ejzswh14jf8fii2b64811e1o2hr437gceb9whmjfssbagvvn7us7dgq3g2vef2vmi4evasw7x2pp3ye6tvp8bhwna97e4a8jfj9qvnf1q4wf4pfs9924fffi7khhrem14nb/a9f6b651c9620c01cb44ecd40d23f3829999999.zip
  3. File: a9f6b651c9620c01cb44ecd40d23f3829999999-limaccount.org.zip
  4. Domain: limaccount.org
  5. Target: MICROSOFT
  6. Name Size Date MD5 a9f6b651c9620c01cb44ecd40d23f3829999999/.DS_Store 6148 2018-01-08 12:14:54 255cb4b8addeecd288f5eaf9dfbbedd2
  7. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/._.DS_Store 222 2018-01-08 12:14:54 fbfdf52431482269153e8d8f2a47cb50
  8. a9f6b651c9620c01cb44ecd40d23f3829999999/block.php 2672 2016-06-11 05:45:36 2447910e0f2a74a6bb975b7b61fdb441
  9. File appears in 82 kits and under 2 different file names
  10. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/._block.php 222 2016-06-11 05:45:36 fbfdf52431482269153e8d8f2a47cb50
  11. a9f6b651c9620c01cb44ecd40d23f3829999999/home/.DS_Store 6148 2017-10-05 19:49:34 7848271a9b6dfba3b7d075ef4b571edd
  12. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/home/._.DS_Store 222 2017-10-05 19:49:34 fbfdf52431482269153e8d8f2a47cb50
  13. a9f6b651c9620c01cb44ecd40d23f3829999999/home/bang.php 1092 2017-11-14 17:56:22 61e0bec610daded14c756bb117af2419
  14. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/home/._bang.php 222 2017-11-14 17:56:22 fbfdf52431482269153e8d8f2a47cb50
  15. a9f6b651c9620c01cb44ecd40d23f3829999999/home/geoplugin.class.php 4647 2015-12-28 23:23:18 c8ea1e960b48a620c00bc65d525a721c
  16. File appears in 1219 kits and under 3 different file names
  17. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/home/._geoplugin.class.php 222 2015-12-28 23:23:18 fbfdf52431482269153e8d8f2a47cb50
  18. a9f6b651c9620c01cb44ecd40d23f3829999999/home/index.php 298229 2018-01-08 12:14:42 fb444953068e3f95c327e0898a3b98a3
  19. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/home/._index.php 273 2018-01-08 12:14:42 f1f567b4a8abdf9ff82b91e572f5891b
  20. a9f6b651c9620c01cb44ecd40d23f3829999999/home/robots.txt 1337 2016-08-07 10:33:46 ba613657ddd17df5e61d5571b9c9d681
  21. File appears in 102 kits
  22. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/home/._robots.txt 222 2016-08-07 10:33:46 fbfdf52431482269153e8d8f2a47cb50
  23. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/._home 222 2017-11-14 19:04:28 fbfdf52431482269153e8d8f2a47cb50
  24. a9f6b651c9620c01cb44ecd40d23f3829999999/index.php 617 2017-01-09 18:01:54 3da702cb973d8c4b48dc087089a14248
  25. __MACOSX/a9f6b651c9620c01cb44ecd40d23f3829999999/._index.php 222 2017-01-09 18:01:54 fbfdf52431482269153e8d8f2a47cb50
  26. __MACOSX/._a9f6b651c9620c01cb44ecd40d23f3829999999 222 2018-01-08 12:14:00 fbfdf52431482269153e8d8f2a47cb50
  27.  
  28. 2 Email addresses found:
  29. rn02wlx@gmail.com (appears in 2 kits)
  30. gp_support@geoplugin.com (appears in 1144 kits)
  31.  
  32.  
  33.  
  34. https://texasmalwareblog.blogspot.com @phish_total
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement