DROPBOX phish running on kahanjyedil[.]com

Found: 2018-01-16 08:58:06
URL: http://kahanjyedil.com/dropnow-www.kahanjyedil.com.zip
File: dropnow-www.kahanjyedil.com.zip
Domain: kahanjyedil.com
Target: DROPBOX
Name                                               Size Date                 MD5                                dropnow/action.php                                  1355 2016-09-20 23:58:18  44a826a51ccca5695e7ffde0a8df4bed
    File appears in 5 kits
dropnow/action2.php                                 1241 2016-09-20 23:58:04  960bb3f5a56b7abc365e8f02cf4badba
    File appears in 2 kits
dropnow/antiboots.php                               2620 2016-09-03 04:43:26  6b3386c86f6f32a4ece607a5cb8e3d16
    File appears in 67 kits  and under 2 different file names
dropnow/autoblock.php                                821 2016-09-03 04:47:58  5e0a3e7c6e81d4310442ce8b64d82881
    File appears in 34 kits
dropnow/css/style1.css                              2471 2016-09-09 05:53:32  abb631fc9c76a3c0b1daea176e391ae8
    File appears in 34 kits
dropnow/img/confirm_text.PNG                        4985 2016-09-03 02:16:26  69f9de2f2c69a07cdcd37694a0051f7a
    File appears in 32 kits
dropnow/img/footer.jpg                             15983 2016-09-03 01:16:06  af51da560c778aff89540f4f36e94465
    File appears in 32 kits
dropnow/img/help.png                                1218 2016-09-03 01:17:20  224a26dd8447d7f2e4c761559b4749e7
    File appears in 32 kits
dropnow/img/left.png                               96390 2016-09-03 03:45:20  30c3a04ccbad81cc99c4af725d578f1d
    File appears in 32 kits
dropnow/img/logo.png                                1427 2016-09-02 23:40:44  38928e53077a706aa26ba249717dd63d
    File appears in 44 kits  and under 2 different file names
dropnow/img/multi.png                              29225 2016-10-01 16:44:44  748e60e2c4c203e0490ff42829c4b736
    File appears in 12 kits
dropnow/img/next.png                                2081 2016-09-03 04:01:36  55ac166497e536b95afef791d422d4b9
    File appears in 32 kits
dropnow/img/texto_23.PNG                            3613 2016-09-09 05:41:30  363b0b31b2673d36aa53afd2c2e3cbc8
    File appears in 32 kits
dropnow/img/Thumbs.db                              41472 2017-03-18 16:44:06  2dcef399303fe68301ed4884a0537302
dropnow/index.php                                   2479 2016-09-29 10:40:46  33550962adcaff72dc5afad87d313cb8
    File appears in 17 kits
dropnow/phone_number.php                            1954 2016-09-21 02:43:12  62c5e482a8dffb4ab81d3880a48dcbe2
    File appears in 5 kits
dropnow/processing.php                              1600 2016-09-09 07:14:38  ba932def08ab6288c1090a4e0338b37c
    File appears in 32 kits
dropnow/success.php                                  123 2016-09-03 04:30:54  6d48a285022c3c9b25eabee681354f9a
    File appears in 20 kits  and under 2 different file names
dropnow/to.php                                        47 2018-01-11 07:44:38  2c019a4f159d1bab43a3f9ee3e2aac4e

2 Email addresses found:
    vip@163.goooo (appears in 7 kits)
    mydropbox021@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total