PAYPAL phish ** running on esorea[.]com

Found: 2018-05-25 03:15:06.759000
URL: http://www.esorea.com/modules/mod_articles_archive/tmpl/ubch.zip
File: www.esorea.com-tmpl-ubch.zip
Domain: esorea.com
Target: PAYPAL
Name                                               Size Date                 MD5                                ubch/ubch/.htaccess                                 8717 2018-05-19 21:20:06  62738f3f87b9a7b80a982a4476d04af5
ubch/ubch/blocker.php                               2672 2017-06-25 08:16:46  2447910e0f2a74a6bb975b7b61fdb441
    File appears in 92 kits  and under 3 different file names
ubch/ubch/index.php                                  648 2017-06-25 08:16:46  9e6049cf9e33471cd0efdd199c98a20d

ubch/ubch/on/1.css                                 49123 2017-06-25 08:16:46  8f899ed98afd3b6e848b3ee25c8042fd

ubch/ubch/on/button.js                               285 2017-06-25 08:16:46  6d90437979b20f6bb742a5f05ad76c19

ubch/ubch/on/form.js                               37866 2017-06-25 08:16:46  45a2ff74c02f43e9e5f4209bd4d0b8d8

ubch/ubch/on/index.php                              4321 2018-05-19 21:22:34  b09e11309c8f7ae36917965f467b20be
ubch/ubch/on/input.js                                505 2017-06-25 08:16:46  aa4ef51120b2aef9d2b1c12a494b9d7b

ubch/ubch/on/js.js                                 10252 2018-04-18 14:48:02  fd4383b0161abafe55e1292b22a9ec38
ubch/ubch/on/webres.php                             1459 2018-05-08 18:42:38  555e3130f29f454426f6bffe109ead4f
ubch/ubch/robots.txt                                1337 2017-06-25 08:16:46  ba613657ddd17df5e61d5571b9c9d681
    File appears in 134 kits

2 Email addresses found:
    my.umbrella6667@gmail.com
    martinsolvege@webservice.net



https://texasmalwareblog.blogspot.com   @phish_total