ALIBABA phish running on saintannspublicschool[.]com

Found: 2018-01-11 23:20:44.952000
URL: http://saintannspublicschool.com/css/Alibaba.zip
File: saintannspublicschool.com-css-Alibaba.zip
Domain: saintannspublicschool.com
Target: ALIBABA
Name                                               Size Date                 MD5                                Alibaba.com/Alibaba/dhl.html                        6997 2016-11-06 20:07:42  36a1e60abb19a75a7ed5e1ebeb6c5ea4
Alibaba.com/Alibaba/images/img1.jpg                67030 2016-11-06 20:08:00  d01105df200d9d0309bed3a8b5c26815
    File appears in 32 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img2.png                335152 2016-11-06 20:08:12  bb34415167f5776f8918e004bd05ab0d
    File appears in 141 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img3.gif                 1380 2016-11-06 20:08:18  de1d32379d27e9caa603ee7fdbfcc4e2
    File appears in 154 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img4.gif                59977 2016-11-06 20:08:26  62db9d89ce236e6410884ecb6e803f0c
    File appears in 132 kits
Alibaba.com/Alibaba/loader1.htm                     8356 2016-11-06 20:07:28  2a151bfb0863811fe06cda9c9b11bef8
    File appears in 13 kits
Alibaba.com/Alibaba/Login.alibaba.com.php           6938 2016-11-06 20:07:34  0a874bfd77ef9e883bf0f0c42c5d08bf
Alibaba.com/Alibaba/post1.php                       1975 2018-01-11 05:43:44  8ad93876a8be3abcd5b460e5a0167f8c

2 Email addresses found:
    shkim.qdcmico@gmail.com
    wirez@googledocs.org (appears in 117 kits)



https://texasmalwareblog.blogspot.com   @phish_total