MICROSOFT phish running on alhamdassociates[.]net

Found: 2018-05-09 15:19:21.294000
URL: https://alhamdassociates.net/shpoint.zip
File: alhamdassociates.net-foo-shpoint.zip
Domain: alhamdassociates.net
Target: MICROSOFT
Name                                               Size Date                 MD5                                shpoint/share/blocker.php                           2644 2018-05-07 07:05:50  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 259 kits  and under 4 different file names
shpoint/share/blocker2.php                          2644 2018-05-07 07:05:50  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 259 kits  and under 4 different file names
shpoint/share/file.html                             4404 2018-05-07 07:49:02  addbabfd20380d53095beddfb9c513c0
shpoint/share/file2.html                            4407 2018-05-07 20:18:22  7ef42a4db4acfe632e8921c637a84af0
shpoint/share/final.php                              764 2018-05-08 08:01:06  a431b3735ee24df5e88ac91c462b7948
shpoint/share/final2.php                             866 2018-05-08 08:01:16  064d3d397a08ab1c0a18d172433558c3
shpoint/share/images/1.png                         26392 2018-05-08 07:16:42  0839798080e3dd5fcf044e1c67f5c7ee
shpoint/share/images/2.png                         28107 2018-05-08 07:17:08  74bf0bd65b55ab456db62e432434912c
shpoint/share/images/button.png                      636 2018-05-07 07:05:50  5b023acca5ce08dac6b659aa85805f1c
shpoint/share/images/button2.png                     636 2018-05-07 07:05:50  5b023acca5ce08dac6b659aa85805f1c
shpoint/share/images/favicon.ico                   17174 2018-05-07 07:05:50  12e3dac858061d088023b2bd48e2fa96
    File appears in 368 kits  and under 9 different file names
shpoint/share/images/favicon2.ico                  17174 2018-05-07 07:05:50  12e3dac858061d088023b2bd48e2fa96
    File appears in 368 kits  and under 9 different file names
shpoint/share/index.php                              395 2018-05-07 07:05:50  47710b29f0b416bb94f6cd3274563abd
shpoint/share/index2.php                             398 2018-05-07 20:10:44  db8d22d61151e01a44a318f9e8c77b1f

1 Email addresses found:
    rnmohan.ac@gmail.com (appears in 8 kits)



https://texasmalwareblog.blogspot.com   @phish_total