MICROSOFT phish running on greenglades[.]org

Found: 2018-09-11 00:15:36.237000
URL: http://greenglades.org/greenglades/BB.zip
File: greenglades.org-greenglades-BB.zip
Domain: greenglades.org
Target: MICROSOFT
Name                                               Size Date                 MD5                                BB/css/style.css                                    4429 2018-05-10 17:43:40  f75c0cd2d13964d2ffc1f5074cdab893
BB/favicon.ico                                      4286 2018-05-10 17:43:54  bb615167fc875e980342d3b816efeb1a
    File appears in 17 kits
BB/img/365.png                                       947 2018-05-10 17:45:10  9e78294b06cce66132cede515f800618
    File appears in 17 kits
BB/img/aol.png                                       776 2018-05-10 17:44:58  f302a14e0220f1b07e2e38b439aebe3d
    File appears in 17 kits
BB/img/hero.png                                    29861 2018-05-10 17:44:46  721ca96ce8865d5e945c978f5fe050ca
    File appears in 31 kits  and under 4 different file names
BB/img/logo.png                                     6637 2018-05-10 17:44:36  bc7ba8ed0b19b4c55b83cc41adec0e40
    File appears in 17 kits
BB/img/others.png                                    806 2018-05-10 17:45:42  9ecffaa9aa7c8a8e2fb1324c423e95ec
    File appears in 17 kits
BB/img/outlook.png                                  1120 2018-05-10 17:45:04  f2479e3ab9c907c1f2b18c18b84504d8
    File appears in 17 kits
BB/img/yahoo.png                                    1411 2018-05-10 17:44:52  3ce8f16ffc224996b0eb445804fcc150
    File appears in 17 kits
BB/index.php                                         144 2017-01-31 23:12:00  0526c242a1f7b6117202fe21d47e31b1
    File appears in 192 kits  and under 4 different file names
BB/login.php                                        7134 2018-05-10 17:47:52  c6258f0642c8c336929af8ad4c01f3a7
BB/remail.php                                       1896 2018-07-13 18:13:26  9736b0a41181427cbeeccaeca9950ae0

3 Email addresses found:
    wire_hitman@yahoo.com
    ricklloyd177@gmail.com
    no_reply@inbox.com



https://texasmalwareblog.blogspot.com   @phish_total