MICROSOFT phish running on 000webhostapp[.]com

Found: 2018-01-24 04:16:11.236000
URL: http://unlimitedviews.000webhostapp.com/PAYINV11.zip
File: unlimitedviews.000webhostapp.com-foo-PAYINV11.zip
Domain: 000webhostapp.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                PAYINV11/PAYINV1/PAYINV/AA1.htm                     2315 2017-10-06 17:57:52  db7397e52d06e284c1dcaf143e72c781

PAYINV11/PAYINV1/PAYINV/AA1.php                      878 2018-01-12 10:20:12  80888b734c72e503fa8443b3619e3abd
PAYINV11/PAYINV1/PAYINV/aol_files/AA1.png          15956 2017-10-05 09:37:46  f67eb075dec30c0757b70178d7f8cc02
    File appears in 77 kits  and under 4 different file names
PAYINV11/PAYINV1/PAYINV/css/style.css               6902 2017-12-05 09:29:06  c8bf4473304a7a1d7e9b9199606aa9f7
PAYINV11/PAYINV1/PAYINV/g_files/which 2.png         5776 2017-10-05 09:22:48  b67b29fd0babde82586c2dc6375ba888
    File appears in 7 kits
PAYINV11/PAYINV1/PAYINV/g_files/which.PNG          23524 2017-10-05 09:22:52  8444cf8e6be42f69bc4aa6ce763d90bc
    File appears in 7 kits
PAYINV11/PAYINV1/PAYINV/g_files/which1.png          5407 2017-10-05 09:22:56  503665fa9754456aa2cf5e094cc2eaf7
    File appears in 7 kits
PAYINV11/PAYINV1/PAYINV/g_files/which3.png          5462 2017-10-05 09:23:00  d5c47c8381651e27cdfcbd14eacddad8
    File appears in 7 kits
PAYINV11/PAYINV1/PAYINV/GGC.htm                     2315 2017-10-06 17:58:24  dff858baf0ae722d23fd18464435dc07

PAYINV11/PAYINV1/PAYINV/GGC.php                      705 2018-01-12 10:19:56  2a0c48a58074db943157e10fb86721d5
PAYINV11/PAYINV1/PAYINV/GGN.html                    1666 2017-10-06 17:53:32  783c9789897b16bb4dabdf5fbcf40089

PAYINV11/PAYINV1/PAYINV/GGP.html                    2311 2017-10-06 17:59:14  24dc836794ab36b223671b20323c61bd

PAYINV11/PAYINV1/PAYINV/gmail_files/GG1.png        28750 2017-10-05 09:24:14  9100850aaf5a709531a5be25384c8419
    File appears in 47 kits  and under 2 different file names
PAYINV11/PAYINV1/PAYINV/images/aol.png              1538 2017-10-05 09:21:08  ea9772b90a517e9c61577bc209ae005e
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/gmail.png            1840 2017-10-05 09:21:12  b3f46ee52c669c94cc5ec9bcc58589a1
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/landing-devices-bg.jpg 235949 2017-12-05 09:28:06  3c6b5547b645db274cef205a4b7501ba
PAYINV11/PAYINV1/PAYINV/images/mail.png             1694 2017-10-05 09:21:18  34c474722fc5046a7f984c307050365d
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/office.png           1421 2017-10-05 09:21:22  4dfcf323758894583269dcd89e8e562b
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/oneDrive.png        14981 2017-10-05 09:21:26  0687a1330a816d19c12cb00682bfe01d
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/outlook.png          2103 2017-10-05 09:21:30  6ec5d7c8db94bfba6272598af602593a
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/images/Thumbs.db            4608 2017-10-06 17:42:18  addd754c357a18a5ad4b8e802ad593ff

PAYINV11/PAYINV1/PAYINV/images/yahooMail.png        1997 2017-10-05 09:21:34  e100951d0b2da8bb50259b7e1ceadbe6
    File appears in 2 kits
PAYINV11/PAYINV1/PAYINV/index.html                  2995 2017-11-09 05:12:36  4e62e228d59c2c8c22375fcfeeba8927

PAYINV11/PAYINV1/PAYINV/live_files/LL1.png         10776 2017-10-05 09:35:00  6b97ed8cb0dcd102216220231f6b82ba
    File appears in 83 kits  and under 7 different file names
PAYINV11/PAYINV1/PAYINV/LL1.htm                     2547 2017-10-06 17:59:38  5e1e928db1a917240496e67305b6ac09

PAYINV11/PAYINV1/PAYINV/LL1.php                      708 2018-01-12 10:19:44  a7ca4bf8fc9d7713a8e020159d6b1c6b
PAYINV11/PAYINV1/PAYINV/OF.htm                      2556 2017-10-06 17:59:54  ba1688109aa4dd58cf4158244ecba38a

PAYINV11/PAYINV1/PAYINV/OF.php                      1126 2018-01-12 10:18:32  d1c63748bdc1393f5d6bd86fedc6ecb6
PAYINV11/PAYINV1/PAYINV/ojomu/OF1.jpg              11286 2017-10-05 09:39:14  910913f953ac7ec23a1746cf90d4e5ad
    File appears in 47 kits  and under 2 different file names
PAYINV11/PAYINV1/PAYINV/OT.htm                      2799 2017-10-06 18:00:20  e2db1cfccc36d67b4ff51962eea5dbb5

PAYINV11/PAYINV1/PAYINV/OT.php                       707 2018-01-12 10:18:18  219087d2935211a75b52667e7ef51b96
PAYINV11/PAYINV1/PAYINV/other_files/OT.png          7826 2017-10-05 12:53:42  e433eea50a4fd4f80605216cafc59f7c

PAYINV11/PAYINV1/PAYINV/other_files/Thumbs.db      10752 2017-10-05 12:53:42  3b3e5b409d37560b28e1dedcd1610282

PAYINV11/PAYINV1/PAYINV/phone.php                   1772 2018-01-12 10:18:08  819ba222312febb775a15fda497cdc63
PAYINV11/PAYINV1/PAYINV/verification.php           50078 2017-05-17 13:52:46  73853217c691b5ecd975e8d63cea1723

PAYINV11/PAYINV1/PAYINV/YY.html                     2111 2017-10-06 18:00:38  75070a643c45fce6dbca54c91ba4649e

PAYINV11/PAYINV1/PAYINV/YY1.htm/Thumbs.db          10752 2017-10-05 13:07:08  a1557eb8baa10b829c438954c5a63394

PAYINV11/PAYINV1/PAYINV/YY1.htm/YY1.png            12947 2017-10-05 13:07:08  a608a75ecac04f322adf623b1a2382ef

PAYINV11/PAYINV1/PAYINV/YY1.php                      711 2018-01-12 10:17:50  8e4327645a2783a9fc0657b719b3816b

2 Email addresses found:
    ungarrsargon@gmail.com
    wirez@googledocs.org (appears in 123 kits)



https://texasmalwareblog.blogspot.com   @phish_total