MICROSOFT phish ** running on theseza[.]cc

Found: 2018-01-24 10:15:20.616000
URL: http://theseza.cc/secured-server.zip
File: theseza.cc-foo-secured-server.zip
Domain: theseza.cc
Target: MICROSOFT
Name                                               Size Date                 MD5                                secured-server/enterpassword.php                    2434 2017-12-03 13:32:16  29a7a7d5b8a34003339d7d6081142047
secured-server/.DS_Store                            6148 2018-01-20 17:31:14  3fc3e8ec3f4615853005eedcffba2f73
secured-server/index.php                            1400 2017-12-03 13:46:20  d8da54aa0f8fab0d46705b10ba465286
secured-server/submit.php                           2678 2018-01-15 11:29:08  29bbbbefee93398f6cd0866533fdf713
secured-server/enterpasswordagain.php               2428 2017-12-03 13:27:02  723811d33819adefa641d9fdacab4152
secured-server/qwccsjr4wffxfc93mxlf67gp.php         3751 2018-01-22 14:28:12  0f54e957e48c621395d935a24a96ca67
secured-server/style.css                            6008 2017-12-02 21:18:34  6df8deaf769b76e5344701b8af9e4446
secured-server/.htaccess                           35317 2017-12-02 12:18:30  3694c21438a8dc7028e8ea233fe75453
secured-server/js/jquery.js                        95790 2017-12-02 21:18:48  4dc834d16a0d219d5c2b8a5b814569e4
    File appears in 7 kits  and under 3 different file names
secured-server/blocker.php                          2674 2017-12-03 11:18:54  8fd335bf7d8d7bf0943ff4c9c9a2a4fa
secured-server/redirecttoinbox.php                  1429 2018-01-22 12:44:42  f8706aa29942681e76aa0355b3012d89
secured-server/images/0.jpg                        298105 2017-12-02 21:18:48  f5a9a9531b8f4bcc86eabb19472d15d5
secured-server/images/ms-logo-v1.svg                 756 2017-12-02 21:18:40  9de70d1c5191d1852a0d5aac28b44a6c
secured-server/images/picker_account_msa.svg         379 2017-12-02 21:18:44  2d8f86059be176833897099ee6ddedeb
    File appears in 12 kits  and under 2 different file names
secured-server/images/favicon.png                   3109 2017-12-02 21:18:44  563829b27e0cdb44d229985a254c0672
secured-server/images/Office-365-Logo.png          25171 2018-01-20 17:27:34  95e1d221f4f2f485c900d7c69d5f8049
    File appears in 5 kits
secured-server/images/ms-logo-v2.jpg                2797 2017-12-02 21:18:40  5ec86907c1ac5ef3e117723998feb8be
secured-server/security-assurance.php               1655 2018-01-22 12:57:58  99dd6ad2f786904ccc002cf3a1080286
secured-server/retry.php                            3748 2017-12-03 13:22:12  f83e3adf9a72b16d8bc5c54ae54ad6ea
secured-server/robots.txt                           1337 2017-12-02 21:18:28  ba613657ddd17df5e61d5571b9c9d681
    File appears in 82 kits
secured-server/resubmit.php                         2678 2018-01-15 11:29:16  f85eacc527e1dfafa25a98cebf07ec56

2 Email addresses found:
    glennapaytner2@gmail.com
    loganjam2209@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total