Microsoft phish running on cvmsb[.]com

Found: 2018-01-10 15:16:03.882000
URL: http://www.cvmsb.com/A2.zip
File: www.cvmsb.com-foo-A2.zip
Domain: cvmsb.com
Target: Microsoft
Name                                               Size Date                 MD5                                A2/blocker.php                                      2644 2016-12-15 03:28:36  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 199 kits  and under 4 different file names
A2/index.php                                         264 2017-10-19 15:54:56  9e4bcf0b4aaeeb0c36c542ce5764b99c
A2/index2.php                                      18690 2017-10-19 15:55:28  7288e66ffc949622075354d03c5c9aad
A2/indexa.php                                      17617 2017-10-19 15:55:48  718706178edefba65c5391f8b313ff18
A2/p017c/aad.login.min.js                          166428 2017-01-21 05:14:04  d0799120934ce673dc440b357015e487

A2/p017c/bannerlogo.png                             4585 2016-06-05 21:24:42  9f09a27d4f69b3557c7433574a29d726
    File appears in 72 kits  and under 4 different file names
A2/p017c/default_signin_illustration.png           78369 2017-01-21 05:29:12  e68f99f014387cf0fb231f249cbf93f5

A2/p017c/ellipsis.gif                              67226 2016-12-28 20:32:42  f54664bb49b6e382d344e9b50560a16a

A2/p017c/favicon_a.ico                             17174 2016-06-04 18:57:42  12e3dac858061d088023b2bd48e2fa96
    File appears in 236 kits  and under 8 different file names
A2/p017c/heroillustration.jpg                      203294 2016-06-05 21:24:24  65283b123eb235e6176ae98c02ac5b1c
    File appears in 142 kits  and under 4 different file names
A2/p017c/jquery.1.11.min.js                        109078 2017-01-21 05:13:16  f274d523a09ce908f4bd2bd2fdb0e7cb
    File appears in 18 kits  and under 3 different file names
A2/p017c/login.min.css                             21534 2016-06-04 18:58:02  ee5385798e2300a2b173ecf29b73246c
    File appears in 4 kits
A2/p017c/mlogo.png                                  1040 2017-01-21 05:15:20  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 46 kits  and under 2 different file names
A2/p017c/style.css                                  7812 2016-05-31 02:42:40  81d1717dd8379e22c8ab66f8f83dc181
    File appears in 135 kits  and under 2 different file names
A2/popup.php                                        1993 2017-09-12 10:28:34  986916d0effbde5a266b37ae5d93002e
A2/popup2.php                                       1934 2017-09-12 10:28:12  5f91daaa34387a9a9ae45ea7a071502e
A2/sc.php                                            252 2017-10-19 15:56:24  06f02187591d60f285af0a3170876440
A2/thanky0u.php                                     8475 2017-10-19 16:01:22  b0939fb54416bf3e357b166a18821296
A2/thanky0u2.html                                   8499 2017-09-07 19:45:52  522e750b41b3222b5639c24d50262d2b

1 Email addresses found:
    ingridengstrom5@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total