DROPBOX phish running on chicagoweatherization.com

Found: 2017-11-07 10:46:59.025000
URL: http://chicagoweatherization.com/dbfile.zip
File: chicagoweatherization.com-foo-dbfile.zip
Domain: chicagoweatherization.com
Target: DROPBOX
Name                                               Size Date                 MD5                                dbfile/dbfile/best/css/default.css                 23171 2016-08-16 16:49:04  c99a87a5863bb21e022f693aed399b60
    File appears in 282 kits  and under 2 different file names
dbfile/dbfile/best/css/style.css                    2011 2016-08-16 16:49:04  44192d57ebaef014f54bd318bdb89d59
    File appears in 277 kits  and under 2 different file names
dbfile/dbfile/best/css/styleTinybox.css             1865 2016-08-16 16:49:04  f63fa92caca001f72cf0ac0563e5fe98
    File appears in 285 kits  and under 2 different file names
dbfile/dbfile/best/favicon.ico                      6518 2016-08-16 16:49:04  9391620020d44c78b0dc51abbcd151a0
    File appears in 567 kits  and under 5 different file names
dbfile/dbfile/best/form.php                         3370 2016-08-16 16:49:04  7f0d5669d477f560c87de21e4a62cdff
    File appears in 228 kits  and under 2 different file names
dbfile/dbfile/best/images/aol.jpg                   2611 2016-08-16 16:49:04  c0a8313ebef0932f93a7c294cc0888d0
    File appears in 421 kits  and under 6 different file names
dbfile/dbfile/best/images/btn_submit.png            1232 2016-08-16 16:49:04  af884feaf89e68a5981c5e47facbf2c2
    File appears in 288 kits  and under 2 different file names
dbfile/dbfile/best/images/cancel.png                4009 2016-08-16 16:49:04  3d0e162acc48eab3c7519796297e3f50
    File appears in 288 kits  and under 2 different file names
dbfile/dbfile/best/images/close.png                 1419 2016-08-16 16:49:04  4278a8b021acb550ad96cdddb2db6d8f
    File appears in 283 kits  and under 2 different file names
dbfile/dbfile/best/images/gmail.jpg                 2449 2016-08-16 16:49:04  addcb559cee69f7c0818cfe02dd3f1d4
    File appears in 602 kits  and under 5 different file names
dbfile/dbfile/best/images/hotmail.jpg               1959 2016-08-16 16:49:04  ed07ea8604d12eebe21d8d108576096b
    File appears in 407 kits  and under 5 different file names
dbfile/dbfile/best/images/lockbg.gif                8205 2016-08-16 16:49:04  a62fca51d647af409a8db745b071b27b
    File appears in 283 kits  and under 2 different file names
dbfile/dbfile/best/images/lockbg.png               70631 2016-08-16 16:49:04  c6107f3cd2a57a2834436f8e284dbdc8
    File appears in 288 kits  and under 2 different file names
dbfile/dbfile/best/images/lockbg2.png              69974 2016-08-16 16:49:04  4254177f5d0c1b385d52c31ce83058e9
    File appears in 283 kits  and under 2 different file names
dbfile/dbfile/best/images/logo.png                  2376 2016-08-16 16:49:04  27cf82e5d8133a75c3e4aedd6a8d0297
    File appears in 322 kits  and under 5 different file names
dbfile/dbfile/best/images/other.jpg                12762 2016-08-16 16:49:04  28ca094cffa08d33ee71610ce3ed1fad
    File appears in 473 kits  and under 3 different file names
dbfile/dbfile/best/images/other.png                75068 2016-08-16 16:49:04  1006ed2e21ed7a5a2b628189e5eb3f09
    File appears in 276 kits  and under 2 different file names
dbfile/dbfile/best/images/sign-in-vflvTYLtt.png    44984 2016-08-16 16:49:04  bd360bb6dc2fb4645f173b8bb6052675
    File appears in 293 kits  and under 2 different file names
dbfile/dbfile/best/images/yahoo.jpg                 2142 2016-08-16 16:49:04  c930bcf158cdfe6d35a4cbd4c1c0812f
    File appears in 555 kits  and under 7 different file names
dbfile/dbfile/best/index.php                        2396 2016-08-16 16:49:04  d693b5a149fa132dd47fe7b6aa40e881
    File appears in 18 kits
dbfile/dbfile/best/js/global.js                    45066 2016-08-16 16:49:04  f8416d4fdd9596bc40255bc27a02690d
    File appears in 289 kits  and under 2 different file names
dbfile/dbfile/best/js/jquery.min.js                61141 2016-08-16 16:49:04  301a9391ce87f6aa9e03fbab8dec78fa
    File appears in 289 kits  and under 3 different file names
dbfile/dbfile/best/js/popup.js                      4029 2016-08-16 16:49:04  440e97795805aec04da6765b260221cd
    File appears in 260 kits  and under 2 different file names
dbfile/dbfile/best/js/styleTinybox.css              1865 2016-08-16 16:49:04  f63fa92caca001f72cf0ac0563e5fe98
    File appears in 285 kits  and under 2 different file names
dbfile/dbfile/best/js/tinybox.js                    5615 2016-08-16 16:49:04  87c8b20998ab7257cc2b25e894dc27ab
    File appears in 289 kits  and under 2 different file names
dbfile/dbfile/best/LoginVerification.php           10464 2016-08-16 16:49:04  97438419778e06e9e9f513d61388a73f
    File appears in 71 kits
dbfile/dbfile/best/submit.php                       2010 2016-09-26 17:43:38  5f9db819619b265c48cd77cd9c446697
    File appears in 18 kits
dbfile/dbfile/best/submit2.php                      1990 2016-09-26 17:43:24  6bfe983b0e57d8e21c8263e196b99c25
    File appears in 18 kits

4 Email addresses found:
    leonardharmon1@gmail.com (appears in 23 kits)
    leonardharmon1313@gmail.com (appears in 18 kits)
    babanlanlaseunpupofunwa12@inbox.com (appears in 18 kits)
    newsupdate@servisdropbox.com (appears in 172 kits)



https://texasmalwareblog.blogspot.com   @phish_total