WEBMAIL phish running on gtechsoftware[.]in

Found: 2018-01-17 02:20:30.208000
URL: http://gtechsoftware.in/officenew.zip
File: gtechsoftware.in-foo-officenew.zip
Domain: gtechsoftware.in
Target: WEBMAIL
Name                                               Size Date                 MD5                                officenew/blocker.php                               2644 2014-12-03 00:17:02  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 202 kits  and under 4 different file names
officenew/index.php                                  624 2017-05-15 14:52:24  76544dc0fbba0557e32aa9a046471ac3

officenew/officenew/images/1.png                   25890 2017-04-25 10:41:18  e3fc9ea49517cccf805ad6f8431d3c6d
    File appears in 3 kits
officenew/officenew/images/2.png                   1343149 2016-04-17 15:05:08  2d0d8a4705f8fbb1e637a1cf2ae36598
    File appears in 12 kits  and under 2 different file names
officenew/officenew/images/cant.png                 1512 2016-04-17 15:05:48  b603295785ea0c13ade1e27b317c4e46
    File appears in 13 kits
officenew/officenew/images/sig.png                   714 2016-04-17 15:05:38  bbb9ed69ada2a0d18bdef1ec1d856384
    File appears in 13 kits
officenew/officenew/images/ter.png                  1602 2016-04-17 15:05:20  2a3907c2fe4b7e1613235888a0414862
    File appears in 13 kits
officenew/officenew/index.php                        144 2016-03-10 15:42:26  0526c242a1f7b6117202fe21d47e31b1
    File appears in 118 kits  and under 4 different file names
officenew/officenew/login.php                       6965 2016-04-17 15:13:36  fae0d1bb8c750eb7931603eccc6dcdda
    File appears in 5 kits
officenew/officenew/mailer.php                       732 2017-05-15 14:48:38  00c1901a5b188e19ea27589ed0b7380f
officenew/officenew/ThankYou.html                    246 2016-12-18 12:23:08  38cb91ec866398b428b359ed44d699ce
    File appears in 7 kits

1 Email addresses found:
    babagodblessing2016@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total