DROPBOX phish running on 000webhostapp[.]com

Found: 2018-03-23 02:17:53.232000
URL: https://jowuhiseta.000webhostapp.com/secure-dropbox.zip
File: jowuhiseta.000webhostapp.com-foo-secure-dropbox.zip
Domain: 000webhostapp.com
Target: DROPBOX
Name                                               Size Date                 MD5                                secure-dropbox/document/finish.php                  2038 2015-03-24 06:18:54  84864b0ccec13d66475cd630e49fa1a8

secure-dropbox/document/gen_validatorv4.js         32085 2010-12-31 19:27:52  5ef9888b9eea256ebf8828e41c52c836
    File appears in 53 kits  and under 5 different file names
secure-dropbox/document/index.php                   4010 2014-12-02 16:46:46  2d97d94b113b44af1903bfd9f6dad78d

secure-dropbox/document/ssl/aol.jpg                 2611 2013-02-19 09:47:56  c0a8313ebef0932f93a7c294cc0888d0
    File appears in 478 kits  and under 6 different file names
secure-dropbox/document/ssl/gmail.jpg               2449 2013-02-19 09:47:56  addcb559cee69f7c0818cfe02dd3f1d4
    File appears in 725 kits  and under 5 different file names
secure-dropbox/document/ssl/googledrive.jpg         3474 2014-06-03 13:24:42  99ef86be0f45f4e86ed1e4666c66635f
    File appears in 35 kits
secure-dropbox/document/ssl/googledrive.rar         3303 2014-06-03 13:27:00  bac13ac8b6bcd9ba6172e985a9317642
    File appears in 25 kits
secure-dropbox/document/ssl/hotmail.jpg             1959 2013-02-19 09:47:56  ed07ea8604d12eebe21d8d108576096b
    File appears in 465 kits  and under 5 different file names
secure-dropbox/document/ssl/index.php              237902 2014-06-16 13:23:32  19122accb2e365bb4fbbb276d93450ee
    File appears in 11 kits  and under 4 different file names
secure-dropbox/document/ssl/other.jpg               1693 2013-02-19 09:47:56  319ecd1f8b20f4860a69739fb653068e
    File appears in 110 kits  and under 6 different file names
secure-dropbox/document/ssl/singin.png              1272 2014-05-12 08:03:28  709f852b2f2d1bb23a743824c0498c9b
    File appears in 35 kits
secure-dropbox/document/ssl/tablet-phone-lap - Copy.png 13531 2014-06-03 13:30:04  a750d073be62ae9c9b72642a41f503fe
    File appears in 35 kits  and under 3 different file names
secure-dropbox/document/ssl/tablet-phone-lap.png   13531 2014-06-03 13:30:04  a750d073be62ae9c9b72642a41f503fe
    File appears in 35 kits  and under 3 different file names
secure-dropbox/document/ssl/yahoo.jpg               2142 2013-02-19 09:47:56  c930bcf158cdfe6d35a4cbd4c1c0812f
    File appears in 627 kits  and under 7 different file names

2 Email addresses found:
    mathematics0j0j@gmail.com (appears in 2 kits)
    no_reply@libertyreserve.com (appears in 3 kits)



https://texasmalwareblog.blogspot.com   @phish_total