Google phish ** running on avilatransportes[.]com[.]br

Found: 2018-04-04 07:59:57
URL: http://www.avilatransportes.com.br/google.zip
File: google-avilatransportes.com.br.zip
Domain: avilatransportes.com.br
Target: Google
Name                                               Size Date                 MD5                                images/00000.png                                    1134 2018-04-04 06:56:58  b7ff6adbe7ef9334144571ffe08302c5

images/111.png                                      4715 2018-04-04 06:56:54  e3fd8ca1fc8864a612b6fed5a67b82f3

images/21.png                                        296 2018-04-04 06:56:52  c4782b3a9f64f1018329137efc210bd4

images/favicon.ico                                  1406 2018-04-04 06:56:50  1eb25d8ce437ce479305c755d2c07826
    File appears in 8 kits
images/invoice.png                                 180295 2018-04-04 06:56:48  851cfa3c7473f4e0805d9c1925c276d2

images/invoice1.png                                98749 2018-04-04 06:56:42  f43c0a49128d281fd1bf21d761a63f89
images/re.png                                       2186 2018-04-04 06:56:40  43e141ce9ef1a73e8718b33a3125b213

images/sss.png                                       593 2018-04-04 06:56:38  22a79ca634c852fb45c8134088714c2f

images/_Thumbs.db                                  32768 2018-04-04 06:56:36  df0d50a9cdb4672e5806ac994875e91b

index.php                                            422 2018-04-04 06:56:24  9ef6af054f32761ce929ba0f4e771d92
    File appears in 14 kits
index.txt                                             20 2018-04-04 06:56:22  b0d361ed586d5ec00d8fea1a0c1c26d1

invoice.php                                         3245 2018-04-04 06:56:20  058c2260251e4fbba92feff20cfcf06c

post.php                                            1896 2018-04-04 06:56:16  d2a4c9a864d5fbda10290e5c2f9a086f

2 Email addresses found:
    boxusaaresults@gmail.com
    wirez@googledocs.org (appears in 178 kits)



https://texasmalwareblog.blogspot.com   @phish_total