DROPBOX phish running on cr2paramentos[.]com[.]br

Found: 2018-04-17 17:15:51.747000
URL: https://www.cr2paramentos.com.br/wp-content/layouts/jquery/dropnow.zip
File: www.cr2paramentos.com.br-jquery-dropnow.zip
Domain: cr2paramentos.com.br
Target: DROPBOX
Name                                               Size Date                 MD5                                dropnow/dropnow/action.php                          1356 2018-04-12 08:50:40  4f09fc939f185c45eae00a27197aa523
dropnow/dropnow/action2.php                         1242 2018-04-12 08:51:14  e207540acd6345d2c61f2b1fe69a6b31
dropnow/dropnow/antiboots.php                       2620 2016-10-07 08:21:34  6b3386c86f6f32a4ece607a5cb8e3d16
    File appears in 72 kits  and under 2 different file names
dropnow/dropnow/autoblock.php                        821 2016-10-07 08:21:34  5e0a3e7c6e81d4310442ce8b64d82881
    File appears in 39 kits
dropnow/dropnow/css/style1.css                      2471 2016-10-07 08:21:34  abb631fc9c76a3c0b1daea176e391ae8
    File appears in 39 kits
dropnow/dropnow/img/confirm_text.PNG                4985 2016-10-07 08:21:34  69f9de2f2c69a07cdcd37694a0051f7a
    File appears in 37 kits
dropnow/dropnow/img/footer.jpg                     15983 2016-10-07 08:21:34  af51da560c778aff89540f4f36e94465
    File appears in 37 kits
dropnow/dropnow/img/help.png                        1218 2016-10-07 08:21:34  224a26dd8447d7f2e4c761559b4749e7
    File appears in 37 kits
dropnow/dropnow/img/left.png                       96390 2016-10-07 08:21:34  30c3a04ccbad81cc99c4af725d578f1d
    File appears in 37 kits
dropnow/dropnow/img/logo.png                        1427 2016-10-07 08:21:34  38928e53077a706aa26ba249717dd63d
    File appears in 49 kits  and under 2 different file names
dropnow/dropnow/img/multi.png                      16614 2016-10-07 08:21:34  5adf472f4a44f8868fd0b5a7c7f2639e
    File appears in 20 kits
dropnow/dropnow/img/next.png                        2081 2016-10-07 08:21:34  55ac166497e536b95afef791d422d4b9
    File appears in 37 kits
dropnow/dropnow/img/texto_23.PNG                    3613 2016-10-07 08:21:34  363b0b31b2673d36aa53afd2c2e3cbc8
    File appears in 37 kits
dropnow/dropnow/index.php                           2401 2018-04-12 08:50:04  dce504a7d91d36299308ec71d8d45cd9
dropnow/dropnow/phone_number.php                    1954 2016-10-07 08:21:34  62c5e482a8dffb4ab81d3880a48dcbe2
    File appears in 10 kits
dropnow/dropnow/processing.php                      1600 2016-10-07 08:21:34  ba932def08ab6288c1090a4e0338b37c
    File appears in 37 kits
dropnow/dropnow/success.php                           78 2018-04-12 10:15:42  e027c47ca69a30b5b3adcc2c54e4da0f
dropnow/dropnow/to.php                                41 2018-04-13 02:18:58  9993939e1dc83e357f4e9113dacf43e2

2 Email addresses found:
    ryan@163.goooo
    mrme35@yahoo.com



https://texasmalwareblog.blogspot.com   @phish_total