ALIBABA phish running on geracaobenjamim.com

Found: 2017-09-20 08:17:30.483000
URL: http://geracaobenjamim.com/AEJ3dI.zip
File: geracaobenjamim.com-foo-AEJ3dI.zip
Domain: geracaobenjamim.com
Target: ALIBABA
Name                                               Size Date                 MD5                                AEJ3dI/hello.php                                    2524 2017-08-31 11:23:08  b98ef020a67d2680d6756ffb70b1e94d

AEJ3dI/img/163.png.gif                              2929 2017-01-17 13:14:54  9837628916600e092ad5fab3a8f9b7b6
    File appears in 7 kits  and under 2 different file names
AEJ3dI/img/alibaba.jpg                             11017 2017-01-17 13:14:54  41cee78226c0a8dd23d7e8506f125a5c
    File appears in 4 kits
AEJ3dI/img/dhl bg.jpg                              193177 2017-01-17 13:14:54  b7592fda4c5996752e325d3cf04f08af

AEJ3dI/img/dhl image.jpg                           28530 2017-01-17 13:14:54  02c3ea9d12971aa87a12161022447349
    File appears in 4 kits
AEJ3dI/img/dhl.jpg                                  2512 2017-01-17 13:14:54  60cbb60f2ebb87dda2c6b1026b1db26c
    File appears in 4 kits
AEJ3dI/img/dhlim1.jpg                              73681 2017-01-17 13:14:54  4e91ae03324b7ff68a50157ac705452f
    File appears in 4 kits
AEJ3dI/img/ec21.jpg                                10203 2017-01-17 13:14:54  951e4e2a441a8e3be4e109e727eb5e5b
    File appears in 4 kits
AEJ3dI/img/ecplaza.jpg                              2730 2017-01-17 13:14:54  9576f9e499e0b200f60059291db3d73d
    File appears in 5 kits
AEJ3dI/img/glob.jpg                                10941 2017-01-17 13:14:54  f94b24d02570a22bb146f556c197e2f5
    File appears in 5 kits
AEJ3dI/img/gmail.jpg                               12642 2017-01-17 13:14:54  9e18b983130ecb600364da391a2b146d
    File appears in 4 kits
AEJ3dI/img/hotmail.jpg                              6511 2017-01-17 13:14:54  074b3c0a114b09626b7ac037d081fd1a
    File appears in 4 kits
AEJ3dI/img/india.jpg                               10565 2017-01-17 13:14:54  d5d8c6477d29ee4831824dc22153e6bc
    File appears in 5 kits
AEJ3dI/img/loadingtheimage.gif                     17159 2017-01-17 13:14:54  e5548b49900285dc10545cb5d72e529c
    File appears in 4 kits
AEJ3dI/img/madechina.jpg                           12760 2017-01-17 13:14:54  9d9dc22d70bf1c384f45a25a1ef887a3
    File appears in 4 kits
AEJ3dI/img/mailserver.jpg                           9139 2017-01-17 13:14:54  1b9d2987a565105fb0c70cda62e5a722
    File appears in 4 kits
AEJ3dI/img/static-logo.jpg                         27243 2017-01-17 13:14:54  8e0933f23e8a2f4874199d11d0b8f5d6
    File appears in 5 kits
AEJ3dI/img/tradeboss.jpg                           10471 2017-01-17 13:14:54  0245a17ca9f30bd0981d2e99184e9d97
    File appears in 5 kits
AEJ3dI/img/tradekey.jpg                            11668 2017-01-17 13:14:54  b68ba84b812d91524c1461abac8b8971
    File appears in 5 kits
AEJ3dI/img/yahoo.jpg                                4313 2017-01-17 13:14:54  428812727fd4911860ecf5912bdb8c60
    File appears in 4 kits
AEJ3dI/index.html                                   7127 2017-01-17 13:14:54  0b51f40af353bad8abcf3466237e36c1

AEJ3dI/javascript/facebox/src/facebox.css           1151 2017-01-17 13:14:54  8f642d8245a02cf0e5035aa5559ddecf
    File appears in 8 kits
AEJ3dI/javascript/facebox/src/facebox.js            9532 2017-01-17 13:14:54  bc9034b01e0104a69807a2ed45fcbb79
    File appears in 4 kits
AEJ3dI/javascript/javascript1.js                    3015 2017-01-17 13:14:54  2fd474037bfd5101bd18329c57256c22
    File appears in 4 kits
AEJ3dI/javascript/jquery-1.6.2.min.js              91556 2017-01-17 13:14:54  a1a8cb16a060f6280a767187fd22e037
    File appears in 11 kits  and under 3 different file names
AEJ3dI/javascript/watermark/jquery.watermark.js    19229 2017-01-17 13:14:54  14c592aaa9ff786612c42894aa1d5a07
    File appears in 6 kits  and under 2 different file names

2 Email addresses found:
    'eris.mahr@gmail.com
    no_reply@mylinklog.com (appears in 4 kits)



https://texasmalwareblog.blogspot.com   @phish_total