Microsoft phish running on atelie-tailor[.]ru

Found: 2018-05-08 07:18:57.896000
URL: http://atelie-tailor.ru/sites/default/files/Office_365_Update/micro-soft.zip
File: atelie-tailor.ru-Office_365_Update-micro-soft.zip
Domain: atelie-tailor.ru
Target: Microsoft
Name                                               Size Date                 MD5                                micro-soft/micro-soft/blocker.php                   2644 2017-04-05 13:23:24  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 255 kits  and under 4 different file names
micro-soft/micro-soft/gxn31lb1hn5th2kp66zl60tw.php  1687 2017-04-05 13:23:24  65d471f5d9b0eef336b5ae38ce2dd864
    File appears in 8 kits  and under 3 different file names
micro-soft/micro-soft/images/1.png                 822800 2017-04-05 13:23:24  b4d8d1d72ed10dc78b2bb39c3432c0f5
    File appears in 9 kits
micro-soft/micro-soft/images/2.jpg                 21326 2017-04-07 19:06:22  65aa3ab0039fc773dd871144bdddc75b
micro-soft/micro-soft/images/2i.png                41118 2017-04-05 13:23:24  2fa3a1e04c4d2ee202c46ccb253c324b
    File appears in 7 kits
micro-soft/micro-soft/images/favicon.ico           17174 2017-04-05 13:23:24  12e3dac858061d088023b2bd48e2fa96
    File appears in 360 kits  and under 9 different file names
micro-soft/micro-soft/images/index.css              1996 2017-04-05 13:23:24  630d12dcaa8de9c6c2b33a2bdec5269b
    File appears in 9 kits
micro-soft/micro-soft/images/index1.css             2026 2017-04-05 13:23:24  9694d40d200eab073d8b7bb70a9d5b53
    File appears in 9 kits
micro-soft/micro-soft/images/main_css.css           1995 2017-04-05 13:23:24  b0aac2b3d347e4a350bd3dfa46f63b94
    File appears in 35 kits  and under 3 different file names
micro-soft/micro-soft/images/main1_css.css          1995 2017-04-05 13:23:24  b0aac2b3d347e4a350bd3dfa46f63b94
    File appears in 35 kits  and under 3 different file names
micro-soft/micro-soft/images/Thumbs.db             34304 2017-04-05 13:23:24  a31c370c1beb579d72180806b7f7de44
    File appears in 9 kits
micro-soft/micro-soft/index.php                     1321 2017-04-05 13:23:24  54d568572ecb837d95431e8cfd640d41
    File appears in 9 kits
micro-soft/micro-soft/Login2.php                    1693 2018-04-23 09:07:52  d1529b8e7ffa9050e249dee83d18f98c
micro-soft/micro-soft/Logon.php                     2708 2018-03-22 04:25:12  7d46e3be9e2bcf2b04024e466498b5ee
micro-soft/micro-soft/Logon2.php                    2723 2018-03-22 04:26:18  7e387f9192aa16a45fff4304d862fdd3
micro-soft/micro-soft/robots.txt                    1337 2017-04-05 13:23:24  ba613657ddd17df5e61d5571b9c9d681
    File appears in 119 kits

5 Email addresses found:
    someone@example.com (appears in 80 kits)
    someone@cpanel.com
    uscriminalaffairs@outlook.com
    okcupid419@gmail.com
    new@computer.com



https://texasmalwareblog.blogspot.com   @phish_total