GOOGLE phish running on 000webhostapp[.]com

Found: 2018-01-29 10:26:38
URL: http://000webhostapp.com/a-hclfinance.000webhostapp.com.zip
File: a-hclfinance.000webhostapp.com.zip
Domain: 000webhostapp.com
Target: GOOGLE
Name                                               Size Date                 MD5                                a/geoplugin.class.php                               4645 2016-08-17 15:10:14  b4674def67953bccf00daf51983b3248
    File appears in 7 kits
a/Google_docs_files/_notes/dwsync.xml               2133 2016-04-06 19:09:02  368e28b664e21e90732382469113dde0
    File appears in 899 kits  and under 2 different file names
a/Google_docs_files/aol.png                         1183 2016-04-06 19:09:02  1db15cc5ad50540b10cde2d733efd2a4
    File appears in 1248 kits  and under 3 different file names
a/Google_docs_files/avatar_2x.png                   2195 2016-04-06 19:09:02  17540f255f86c00bde81020fcc165989
    File appears in 946 kits  and under 2 different file names
a/Google_docs_files/checkmark.png                    239 2016-04-06 19:09:02  8b596881d19d5906d926839a9c23e80c
    File appears in 1321 kits  and under 2 different file names
a/Google_docs_files/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff 21956 2016-04-06 19:09:02  3eb14f3838ada50e10f062a895c3b9cf
    File appears in 1182 kits  and under 2 different file names
a/Google_docs_files/docs-icon.png                  52997 2016-04-06 19:09:02  83ad8d0b5df7150110564b46fc0b3911
    File appears in 1148 kits  and under 2 different file names
a/Google_docs_files/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff 22656 2016-04-06 19:09:02  7c5d9f078bea8c1fc0b21a764b832138
    File appears in 1182 kits  and under 2 different file names
a/Google_docs_files/email.png                       2921 2016-04-06 19:09:02  f093ed003976ef8aa9d299051c06f26b
    File appears in 1253 kits  and under 2 different file names
a/Google_docs_files/Google Docs.png                232013 2016-04-06 19:09:02  4ab62a33783d09ef8b8c17a13ec6b0ef
    File appears in 920 kits  and under 2 different file names
a/Google_docs_files/google.png                      9005 2016-04-06 19:09:02  b136662d529f0d1dd780056d7a6ff186
    File appears in 1273 kits  and under 5 different file names
a/Google_docs_files/googledocs.jpg                 14918 2016-04-06 19:09:02  8ff2f663acec81a399f6eaa002d1eb53
    File appears in 912 kits
a/Google_docs_files/live_hotmail.png                 517 2016-04-06 19:09:02  8dccdb0f930ec8ff6c62dd13474fa9f4
    File appears in 1247 kits  and under 3 different file names
a/Google_docs_files/logo_2x.png                     9005 2016-04-06 19:09:02  b136662d529f0d1dd780056d7a6ff186
    File appears in 1273 kits  and under 5 different file names
a/Google_docs_files/logo_strip.png                 26647 2016-04-06 19:09:02  a6dd956e0a1b11991ac93335bbf4b4cc
    File appears in 1104 kits  and under 2 different file names
a/Google_docs_files/logo_strip_2x.png              11156 2016-04-06 19:09:02  384a868cf5a995d033c4ac6e30c60355
    File appears in 1272 kits  and under 5 different file names
a/Google_docs_files/mail_gmail.png                  1528 2016-04-06 19:09:02  5d2f329d5813e9ad215d0117610a58c5
    File appears in 1247 kits  and under 3 different file names
a/Google_docs_files/Thumbs.db                      53248 2016-04-06 19:09:02  6438e1c95adb13a77ea906a7ce3d5ccf
    File appears in 8 kits
a/Google_docs_files/universal_language_settings-21.png   199 2016-04-06 19:09:02  4a2d1168a691747daf4d22e0dc483958
    File appears in 1416 kits  and under 2 different file names
a/Google_docs_files/x_8px.png                        154 2016-04-06 19:09:02  4e3d78afc1958e6e12226cbf27f236bd
    File appears in 1153 kits  and under 2 different file names
a/Google_docs_files/yahoo.png                       2830 2016-04-06 19:09:02  fda2a0cac8b16568eed32edbc85b5db8
    File appears in 1248 kits  and under 3 different file names
a/index.php                                        41198 2017-11-14 07:28:04  cd8d887aaa3b3ac55fb6668c23cecec0

a/Read Me.txt                                         51 2016-11-16 18:04:22  00db63ece6ead0d1f4fa198ccf3052a5
    File appears in 6 kits
a/SpryAssets/SpryValidationPassword.css             2426 2016-04-06 19:09:02  97faad16686bef5246d0953311bffdc8
    File appears in 1128 kits
a/SpryAssets/SpryValidationTextField.css            3122 2016-04-06 19:09:02  997fda9f352033c20b5fbb8fc361537c
    File appears in 1132 kits
a/verification.php                                 52342 2017-11-14 07:29:20  15a29cc993bab045c151ee122067c1c7


2 Email addresses found:
    gp_supprt@geoplugin.com (appears in 5 kits)
    miller.23don@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total