Microsoft phish ** running on valhausnj[.]com

Found: 2018-04-06 17:01:55
URL: https://valhausnj.com/Outlook%20New%20Final%202017.zip
File: Outlook%20New%20Final%202017-valhausnj.com.zip
Domain: valhausnj.com
Target: Microsoft
Name                                               Size Date                 MD5                                Outlook New Final 2017/css/conv.min.css            17955 2017-08-15 19:02:04  eca70f9c011afab79add62e8bf769bbc

Outlook New Final 2017/images/continue.png           603 2017-07-31 05:12:24  9e21d4bad10df9c0b328da229efceba6

Outlook New Final 2017/images/favicon.ico          17174 2015-04-21 22:59:36  12e3dac858061d088023b2bd48e2fa96
    File appears in 360 kits  and under 9 different file names
Outlook New Final 2017/images/lofo.png             22693 2017-08-05 07:19:34  19f4e2c15d6f3e1a1f261aaaadad1abd

Outlook New Final 2017/images/logn.png               574 2017-07-31 05:14:34  8885602e727a3115937cdaef3e48f1a5

Outlook New Final 2017/images/m10.png                518 2017-07-31 05:14:14  13fccbdbb5a648ae64866bc9b9795bed

Outlook New Final 2017/images/m6.png                 642 2017-07-31 05:11:30  b88389e81b3b73a5eb0f5eb374d65dc7

Outlook New Final 2017/images/m7.png                 500 2017-07-31 05:11:48  11e0cb0cdf3c37272f38820b57fcf2cd

Outlook New Final 2017/images/m9.png                 753 2017-07-31 05:13:50  dc8199cf5e6585b5d7a037496df1692b

Outlook New Final 2017/images/t1.jpg               579468 2017-08-15 18:31:30  af828c8f0c5db59e072caa3dfafe1fcd

Outlook New Final 2017/images/t3.png               25609 2017-08-05 07:45:06  a10c6d040a36019e828aa3e420d0ac93

Outlook New Final 2017/index.php                     144 2016-03-11 01:42:24  0526c242a1f7b6117202fe21d47e31b1
    File appears in 178 kits  and under 4 different file names
Outlook New Final 2017/login.php                    4462 2017-08-15 19:18:34  be9acbc1374f8a60fe7b0ddae759c048
Outlook New Final 2017/next.php                     1539 2017-10-02 18:50:02  a011d3390e386aa02042d3c388f0b8fa
Outlook New Final 2017/step2.php                    7467 2017-08-15 19:21:24  b3660367de4e92926b2f4f06161de4ee

2 Email addresses found:
    doncharming001@gmail.com
    supertool@mxtoolbox.com (appears in 65 kits)



https://texasmalwareblog.blogspot.com   @phish_total