Adobe phish running on stoneconceptsoz[.]com

Found: 2018-01-04 11:37:22
URL: http://stoneconceptsoz.com/PDF.zip
File: PDF-stoneconceptsoz.com.zip
Domain: stoneconceptsoz.com
Target: Adobe
Name                                               Size Date                 MD5                                PDF/PDF/purchase uthenticated/aa24e388284a6643cf23d10b568b13bf/error_log   472 2017-06-13 13:00:50  4ed911fa51b0e85db4a9b682747a9782
    File appears in 3 kits
PDF/PDF/purchase uthenticated/aa24e388284a6643cf23d10b568b13bf/index.htm 1376831 2017-06-13 13:00:50  ff5be1fc4878c4819bb1f366fb7ebb50
    File appears in 4 kits
PDF/PDF/purchase uthenticated/aa24e388284a6643cf23d10b568b13bf/jk/default.css 23171 2017-06-13 13:00:50  c99a87a5863bb21e022f693aed399b60
    File appears in 286 kits  and under 2 different file names
PDF/PDF/purchase uthenticated/aa24e388284a6643cf23d10b568b13bf/Scan_20170217.png 1442596 2017-06-13 13:00:50  3c29f3bcbaf1c77eadc1000df1f20d8f
    File appears in 3 kits
PDF/PDF/purchase uthenticated/aa24e388284a6643cf23d10b568b13bf/submit.php  1951 2017-06-13 11:20:50  c4de672f81dc5159a4903f3ce753a18b
    File appears in 3 kits
PDF/PDF/purchase uthenticated/index.php              526 2017-04-13 02:58:00  f2b2f1315e7e1bd8d5e80986bd0e148b
    File appears in 3 kits
PDF/PDF/purchase uthenticated/jk/error_log           472 2017-06-13 02:40:58  4ed911fa51b0e85db4a9b682747a9782
    File appears in 3 kits
PDF/PDF/purchase uthenticated/jk/index.htm         1376831 2017-04-13 02:58:32  ff5be1fc4878c4819bb1f366fb7ebb50
    File appears in 4 kits
PDF/PDF/purchase uthenticated/jk/jk/default.css    23171 2017-04-13 02:59:18  c99a87a5863bb21e022f693aed399b60
    File appears in 286 kits  and under 2 different file names
PDF/PDF/purchase uthenticated/jk/Scan_20170217.png 1442596 2017-04-13 02:58:46  3c29f3bcbaf1c77eadc1000df1f20d8f
    File appears in 3 kits
PDF/PDF/purchase uthenticated/jk/submit.php         1951 2017-06-13 12:43:40  c4de672f81dc5159a4903f3ce753a18b
    File appears in 3 kits

3 Email addresses found:
    django.official@yandex.com (appears in 3 kits)
    andersonoffice960@gmail.com (appears in 3 kits)
    newsupdate@pdf.com (appears in 4 kits)



https://texasmalwareblog.blogspot.com   @phish_total