MICROSOFT phish running on getsmartservice[.]com

Found: 2018-07-27 01:15:12.421000
URL: https://www.getsmartservice.com/microsoftexcelverification.zip
File: www.getsmartservice.com-foo-microsoftexcelverification.zip
Domain: getsmartservice.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                microsoftexcelverification/images/favicon.ico       3432 2017-05-30 04:28:40  75099623c84266df9d4613b6caa88969
    File appears in 6 kits
microsoftexcelverification/images/m1.png            6602 2017-05-30 04:13:32  11e1afcb5b8b06b7672e12b8358cd7cc
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/images/m2.png           16157 2017-05-30 04:14:02  19c90e7e30656e11cc0e51cd13530727
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/images/m3.png             914 2017-05-30 04:14:46  a2a52b27eba21f8d98a7eb9ae67962e3
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/images/m4.png           380622 2017-05-30 04:16:00  ff38a5ca3aae4478ef67036add59d372
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/images/m5.png            1188 2017-05-30 04:23:22  d0ba8000f01444afa23c1b63d303040a
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/images/m6.png            1756 2017-05-30 04:23:34  3879d6766021d78a425efa2fddffc89f
    File appears in 4 kits  and under 2 different file names
microsoftexcelverification/index.php                 144 2016-03-11 01:42:24  0526c242a1f7b6117202fe21d47e31b1
    File appears in 192 kits  and under 4 different file names
microsoftexcelverification/login.php                3435 2017-05-30 06:29:54  8ad062a99fa9a19180e168b80824102b
    File appears in 3 kits
microsoftexcelverification/verification.php         2772 2016-11-04 00:55:50  e8e2648d7aa9056ee30426e7a6ace2dd
    File appears in 3 kits
microsoftexcelverification/phone.php                1792 2018-01-17 06:47:54  59b76182ffa30a630193d336cd290d93
microsoftexcelverification/post.php                 1404 2018-01-17 06:47:38  0115441e34ef8d82caef8befd0d2341a

3 Email addresses found:
    davidscott1111222@gmail.com
    wirez@googledocs.org (appears in 188 kits)
    supertool@mxtoolbox.com (appears in 76 kits)



https://texasmalwareblog.blogspot.com   @phish_total