MICROSOFT phish running on solarsynthesistelecoms[.]co[.]za

Found: 2018-02-21 05:15:34.176000
URL: http://solarsynthesistelecoms.co.za/office.zip
File: solarsynthesistelecoms.co.za-foo-office.zip
Domain: solarsynthesistelecoms.co.za
Target: MICROSOFT
Name                                               Size Date                 MD5                                office/files/login.min.css                         21650 2016-10-05 04:09:46  75aadf89df607c39f774e46b45b442dd
    File appears in 28 kits
office/files/login_hover.min.css                      89 2016-10-05 04:09:46  2c957834356b9ca6570167adec33573f
    File appears in 45 kits  and under 2 different file names
office/files/microsoft_logo.png                     1040 2016-10-05 04:09:44  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 69 kits  and under 2 different file names
office/index.html                                  39207 2016-10-22 12:54:20  e46e6ad118d049eba5dd1b3ec8b4380d
    File appears in 12 kits
office/office.php                                    803 2018-01-17 09:07:08  90d74031c87585dd4ed134c44da2fdf8

2 Email addresses found:
    marthypreston20@gmail.com
    xconsole@alboraaq.com (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total