MICROSOFT phish running on pawpawlodge[.]co[.]zw

Found: 2018-05-02 04:32:04.592000
URL: https://pawpawlodge.co.zw/onedri.zip
File: pawpawlodge.co.zw-foo-onedri.zip
Domain: pawpawlodge.co.zw
Target: MICROSOFT
Name                                               Size Date                 MD5                                onedri/onedri/one/css/style.css                     6919 2018-04-04 04:41:16  2b99a0514111df728c87f751d8417b6e
    File appears in 21 kits
onedri/onedri/one/images/aol.png                    1538 2018-04-04 04:41:16  ea9772b90a517e9c61577bc209ae005e
    File appears in 25 kits
onedri/onedri/one/images/gmail.png                  1840 2018-04-04 04:41:16  b3f46ee52c669c94cc5ec9bcc58589a1
    File appears in 25 kits
onedri/onedri/one/images/landing-devices-bg.jpg    199882 2018-04-04 04:41:16  fbeaf13996d872780bda8ca2ad200469
    File appears in 15 kits
onedri/onedri/one/images/mail.png                   1694 2018-04-04 04:41:16  34c474722fc5046a7f984c307050365d
    File appears in 26 kits
onedri/onedri/one/images/office.png                 1421 2018-04-04 04:41:16  4dfcf323758894583269dcd89e8e562b
    File appears in 26 kits
onedri/onedri/one/images/oneDrive.png              14981 2018-04-04 04:41:16  0687a1330a816d19c12cb00682bfe01d
    File appears in 25 kits
onedri/onedri/one/images/outlook.png                2103 2018-04-04 04:41:16  6ec5d7c8db94bfba6272598af602593a
    File appears in 25 kits
onedri/onedri/one/images/Thumbs.db                  4608 2018-04-04 04:41:16  addd754c357a18a5ad4b8e802ad593ff
    File appears in 22 kits  and under 2 different file names
onedri/onedri/one/images/yahooMail.png              1997 2018-04-04 04:41:16  e100951d0b2da8bb50259b7e1ceadbe6
    File appears in 25 kits
onedri/onedri/one/index.php                         3536 2018-04-04 04:41:14  9fd05d1383b6a880545c142c4936e976

onedri/onedri/one/live.php                           705 2018-04-16 06:09:54  685969d1d3a078768a547f220db42bc1
onedri/onedri/one/live_files/LL1.png               10776 2018-04-04 04:41:16  6b97ed8cb0dcd102216220231f6b82ba
    File appears in 125 kits  and under 7 different file names
onedri/onedri/one/LL1.php                           3809 2018-04-04 04:41:14  879ac5a24af0a07ad2dc933f46994936

onedri/onedri/one/OF.php                            3828 2018-04-04 04:41:14  aa1e7cffaf0c647a37c7564c4247df24

onedri/onedri/one/office.php                         736 2018-04-16 06:09:42  49142519615d64b76a6e6e109bd994e2
onedri/onedri/one/ojomu/OF1.jpg                    11286 2018-04-04 04:41:16  910913f953ac7ec23a1746cf90d4e5ad
    File appears in 78 kits  and under 2 different file names
onedri/onedri/one/OT.php                            4149 2018-04-04 04:41:16  df682e64ded287abea785675a8d3eaaa

onedri/onedri/one/other.php                          736 2018-04-16 06:09:32  49142519615d64b76a6e6e109bd994e2
onedri/onedri/one/other_files/OT.png                7826 2018-04-04 04:41:16  e433eea50a4fd4f80605216cafc59f7c
    File appears in 22 kits
onedri/onedri/one/other_files/Thumbs.db            10752 2018-04-04 04:41:16  3b3e5b409d37560b28e1dedcd1610282
    File appears in 22 kits  and under 2 different file names

1 Email addresses found:
    morganjonesllc660@gmail.com (appears in 7 kits)



https://texasmalwareblog.blogspot.com   @phish_total