MICROSOFT phish running on khaosanroad[.]com[.]au

Found: 2018-03-07 11:15:14.311000
URL: https://khaosanroad.com.au/zzz/office.zip
File: khaosanroad.com.au-zzz-office.zip
Domain: khaosanroad.com.au
Target: MICROSOFT
Name                                               Size Date                 MD5                                office/office/index.htm                            17593 2018-02-11 21:55:22  c02d1d743d742a0e6321b83237e2fd36
    File appears in 7 kits
office/office/index2.htm                           19997 2018-02-11 21:55:22  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 7 kits  and under 2 different file names
office/office/index2.php                           19997 2018-02-11 21:55:22  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 7 kits  and under 2 different file names
office/office/info.php                               738 2018-02-15 09:50:32  13204235f728b39b394a05ddf5ed0209
office/office/thankyou.htm                         14317 2018-02-11 21:55:22  2ef65ddc39ff6959b99bc0d84624015a
    File appears in 7 kits

3 Email addresses found:
    xoxobillionaire@yandex.com
    info@lol.com (appears in 5 kits)
    info@lol.combla-emailadd-bla (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total