MICROSOFT phish running on staticelectricnd[.]com

Found: 2018-05-03 02:22:04.570000
URL: http://staticelectricnd.com/o63/confidential.zip
File: staticelectricnd.com-o63-confidential.zip
Domain: staticelectricnd.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                confidential/confidential/incorrect.php            44540 2018-05-01 23:21:36  7ee82c12d61bc4bf35e60e9873dec15a
confidential/confidential/index.php                40412 2018-05-01 23:19:40  d21cc0a5685176db2bc8939623e3603c

confidential/confidential/secondpageloader.gif      5601 2018-05-01 23:19:40  f94d045802343974442538d9fc35f37d

confidential/confidential/Sign in to your account_files/aad.js 167628 2018-05-01 23:19:40  c50aabf94f3a014af12c196b4f5538cb
    File appears in 13 kits  and under 2 different file names
confidential/confidential/Sign in to your account_files/bannerlogo.png  4585 2018-05-01 23:19:40  9f09a27d4f69b3557c7433574a29d726
    File appears in 129 kits  and under 5 different file names
confidential/confidential/Sign in to your account_files/heroillustration.jpg 203294 2018-05-01 23:19:40  65283b123eb235e6176ae98c02ac5b1c
    File appears in 238 kits  and under 6 different file names
confidential/confidential/Sign in to your account_files/jquery.js 109078 2018-05-01 23:19:40  f274d523a09ce908f4bd2bd2fdb0e7cb
    File appears in 28 kits  and under 3 different file names
confidential/confidential/Sign in to your account_files/login.css 21664 2018-05-01 23:19:40  aa60dd57b752f9c4ba945e4f8718552a
    File appears in 14 kits  and under 2 different file names
confidential/confidential/Sign in to your account_files/login_hover.css    89 2018-05-01 23:19:40  2c957834356b9ca6570167adec33573f
    File appears in 57 kits  and under 2 different file names
confidential/confidential/Sign in to your account_files/microsoft_logo.png  1040 2018-05-01 23:19:40  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 85 kits  and under 2 different file names
confidential/confidential/Sign in to your account_files/prefetch.htm  3325 2018-05-01 23:19:40  3db3f558c29763df615a1ede472992a4
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/boot.css 182391 2018-05-01 23:19:40  b139499248bd2fb2a99ff1436dd0ecd1
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/boot.js 624440 2018-05-01 23:19:40  8974e7be8f47f5fc026557ada72297dd
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/boot_002.js 624182 2018-05-01 23:19:40  294fec24d190c065cb9cf17e2e926ff5
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/boot_003.js 622132 2018-05-01 23:19:40  ac535e9d7352cabb642e7cb5c180a822
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/boot_004.js 623111 2018-05-01 23:19:40  abf6b0ab0dc9ac32471c461beaa472ed
    File appears in 9 kits
confidential/confidential/Sign in to your account_files/prefetch_data/sprite1.css  7584 2018-05-01 23:19:40  0346d135171f20a65334f60ab90ae884
    File appears in 38 kits  and under 3 different file names
confidential/confidential/Sign in to your account_files/prefetch_data/sprite1.png 16967 2018-05-01 23:19:40  934d28f5d1967abbde9663d01344bf24
    File appears in 38 kits  and under 3 different file names
confidential/confidential/successful.php            4695 2018-05-02 20:55:26  8389b96082abe78f77d2e141e2e7b576

6 Email addresses found:
    gadler72@gmail.com
    someone@contoso.com (appears in 14 kits)
    someone@contoso.onmicrosoft.com (appears in 14 kits)
    someone@example.com (appears in 82 kits)
    someone@example.onmicrosoft.com (appears in 22 kits)
    'someone@example.com (appears in 14 kits)



https://texasmalwareblog.blogspot.com   @phish_total