BlackHole spreads ZeroAccess/Sirefef

With Kafeine observed that BlackHole group that is distributed Carberp in past, now distribute ZeroAccess.
All samples were with FUD status. Couple of hashes:

MD5: 4f7c964fe7011de17ccbce326591586f
SHA1: 455c6a11670bf84550321848907dc7168a130fc1

MD5: 97d8618d933cbc4deae3c3d3e462992a
SHA1: dbdca3a297d91681cfe67145ecd3ea15afea051c

MD5: ce6bb1d60acb1b2f3ba208f7276ef4e6
SHA1: 0023f1f7749f5f2a917c0e6cd56fcdfe4de3d27e