WEBMAIL phish running on peredelka[.]tv

Found: 2018-01-23 15:58:27.499000
URL: http://banner.peredelka.tv/rss/newyah.zip
File: banner.peredelka.tv-rss-newyah.zip
Domain: peredelka.tv
Target: WEBMAIL
Name                                               Size Date                 MD5                                newyah/blocker.php                                  2644 2014-12-03 02:17:00  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 202 kits  and under 4 different file names
newyah/home/images/1.png                            2421 2016-03-05 21:47:28  8d6acda049cf6effa89d19f06b402d8c
    File appears in 11 kits  and under 3 different file names
newyah/home/images/2.png                           14489 2016-03-12 15:29:08  a257cbd01042fbfab25bf5919ec9da68
    File appears in 11 kits  and under 3 different file names
newyah/home/images/3.png                             981 2016-03-05 21:48:34  9aeabbb0f915190fbf57b195edee38d5
    File appears in 11 kits  and under 3 different file names
newyah/home/images/4.png                             718 2016-03-05 21:48:42  6e80192d5e33d45583bcce7ba07a6f11
    File appears in 11 kits  and under 3 different file names
newyah/home/images/5.png                            1049 2016-03-05 21:48:58  06551baa209c70a81d9d42ae967a2e6d
    File appears in 11 kits  and under 3 different file names
newyah/home/images/6.png                           10774 2016-03-12 15:59:16  b02db12d16ad4e8cf25336261d465880
    File appears in 11 kits  and under 3 different file names
newyah/home/images/7.png                            1083 2016-03-05 21:51:56  233d92afe40125e1adb29d1223670fb6
    File appears in 11 kits  and under 3 different file names
newyah/home/images/asd1.png                         1203 2016-03-07 14:39:32  f56e0c8812107455ca140099b3c5394f
    File appears in 11 kits
newyah/home/images/imapin.jpg                      83095 2016-03-07 18:23:10  ebceb871c15c941cc7df32697e307bcd
    File appears in 11 kits
newyah/home/images/sihmim.png                        935 2016-03-05 21:52:10  77a79ffc0a68f18c703d2721df94571f
    File appears in 11 kits
newyah/home/images/ss.png                           1046 2016-03-19 13:21:46  5ffc0741e64b3071396eecad67e54066
    File appears in 10 kits
newyah/home/images/Thumbs.db                       12288 2016-03-13 15:30:28  6ba3d94e85ad7de7d5898c0b4bb8b559
    File appears in 10 kits
newyah/home/index.php                               2477 2016-03-19 07:00:34  01081fa43396ddabc260af7728edd9a3
    File appears in 5 kits
newyah/home/index2.php                              2361 2016-03-19 07:00:54  8106e25b408c584dffd1a632c577db5e
    File appears in 5 kits
newyah/home/result.php                              1745 2017-10-31 07:24:22  607c411032f4344fa7ed2697aaba36c6
newyah/home/thankyou.html                           7612 2016-03-12 06:29:28  a8623cf2b49445ceff6228a8d6d6c495
    File appears in 5 kits
newyah/index.php                                     619 2015-03-24 16:44:44  dc1b67a93b1aed2fdc965128a0185acf
    File appears in 65 kits
new(1).zip                                         678106 2017-08-22 23:06:08  22a461cc58d7d77070cafbe75e8267c6

2 Email addresses found:
    zembotinc1@gmail.com
    wirez@googledocs.org (appears in 121 kits)



https://texasmalwareblog.blogspot.com   @phish_total