ALIBABA phish running on coolwifedata[.]co[.]uk

Found: 2018-03-07 22:15:34.771000
URL: http://coolwifedata.co.uk/wp-admin/Alibaba.zip
File: coolwifedata.co.uk-wp-admin-Alibaba.zip
Domain: coolwifedata.co.uk
Target: ALIBABA
Name                                               Size Date                 MD5                                Alibaba.com/Alibaba/dhl.html                        6997 2016-11-06 20:07:42  36a1e60abb19a75a7ed5e1ebeb6c5ea4
    File appears in 3 kits
Alibaba.com/Alibaba/images/img1.jpg                67030 2016-11-06 20:08:00  d01105df200d9d0309bed3a8b5c26815
    File appears in 37 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img2.png                335152 2016-11-06 20:08:12  bb34415167f5776f8918e004bd05ab0d
    File appears in 159 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img3.gif                 1380 2016-11-06 20:08:18  de1d32379d27e9caa603ee7fdbfcc4e2
    File appears in 171 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img4.gif                59977 2016-11-06 20:08:26  62db9d89ce236e6410884ecb6e803f0c
    File appears in 148 kits
Alibaba.com/Alibaba/loader1.htm                     8356 2016-11-06 20:07:28  2a151bfb0863811fe06cda9c9b11bef8
    File appears in 16 kits
Alibaba.com/Alibaba/Login.alibaba.com.php           6938 2016-11-06 20:07:34  0a874bfd77ef9e883bf0f0c42c5d08bf
    File appears in 3 kits
Alibaba.com/Alibaba/post1.php                       1975 2018-01-11 05:43:44  8ad93876a8be3abcd5b460e5a0167f8c
    File appears in 3 kits

2 Email addresses found:
    shkim.qdcmico@gmail.com (appears in 4 kits)
    wirez@googledocs.org (appears in 156 kits)



https://texasmalwareblog.blogspot.com   @phish_total