Adobe phish running on cryptocurrencyconsulting[.]com

Found: 2018-09-08 15:15:13.021000
URL: http://cryptocurrencyconsulting.com/pdf.zip
File: cryptocurrencyconsulting.com-foo-pdf.zip
Domain: cryptocurrencyconsulting.com
Target: Adobe
Name                                               Size Date                 MD5                                pdf/.htaccess                                       1533 2014-08-26 19:04:56  758e36fa8a0601bf7e3412e6f412a8bd
    File appears in 166 kits  and under 2 different file names
pdf/index.php                                        520 2017-03-02 13:10:32  d163c019b64d568139db279ae5ab5be8
    File appears in 25 kits
pdf/view/index.htm                                 1378258 2018-05-16 12:29:02  e3f9de8c872b6d5f7148a4c57763ee12
pdf/view/jk/bg.png                                 886379 2017-03-02 12:50:10  c17e9a41e8cddefb86dba3367e8a1770
pdf/view/jk/default.css                            23171 2017-03-02 12:48:02  c99a87a5863bb21e022f693aed399b60
    File appears in 336 kits  and under 2 different file names
pdf/view/submit.php                                 2051 2018-08-08 20:40:10  a53b75101d83606e16407dd5d851ee69

2 Email addresses found:
    officereply89@gmail.com
    mail@hotpdf.com



https://texasmalwareblog.blogspot.com   @phish_total