MICROSOFT phish ** running on igg[.]biz

Found: 2018-05-16 09:29:26.124000
URL: http://www.difference.igg.biz/login.microsoftonline.zip
File: www.difference.igg.biz-foo-login.microsoftonline.zip
Domain: igg.biz
Target: MICROSOFT
Name                                               Size Date                 MD5                                login.microsoftonline/.DS_Store                     6148 2018-01-19 11:58:48  58ca59da3d9527d81f5b7f701b2a6946

__MACOSX/login.microsoftonline/._.DS_Store           213 2018-01-19 11:58:48  5b38d8dca50a75a522128e0cfc516600

login.microsoftonline/MSFT/.DS_Store                6148 2018-01-19 11:58:58  bf00ddc62d1d7088bc827f2a1e26f020

__MACOSX/login.microsoftonline/MSFT/._.DS_Store      213 2018-01-19 11:58:58  5b38d8dca50a75a522128e0cfc516600

login.microsoftonline/MSFT/office/index.php         1346 2018-05-08 10:10:14  3d30154a0fbd0ab31d56e596a737ac89

__MACOSX/login.microsoftonline/MSFT/office/._index.php   541 2018-01-19 11:59:08  9770fc4dc9c0f8cfb58684c2390704f1

login.microsoftonline/MSFT/office/pass.php         17446 2017-09-08 23:46:10  c4c90e4f214d46365543d779a4e01ca9
    File appears in 3 kits
__MACOSX/login.microsoftonline/MSFT/office/._pass.php   269 2017-09-08 23:46:10  fe9e5535f6dd5b19a732352cf00180d7

login.microsoftonline/MSFT/office/signin.html      11528 2017-09-08 23:46:04  7e840854c7ae0d4c2b49f53e177ec8d4
    File appears in 3 kits
__MACOSX/login.microsoftonline/MSFT/office/._signin.html   269 2017-09-08 23:46:04  dcdf4c7ca57c325a0f48a9faff5ac0c8

login.microsoftonline/MSFT/office/signinER.html    14865 2017-09-08 23:45:56  4e7dc9bf3f66d422a5328b21b30d4b7a
    File appears in 2 kits
__MACOSX/login.microsoftonline/MSFT/office/._signinER.html   269 2017-09-08 23:45:56  1965307634b1dbdc2202d9f14b33a66b

__MACOSX/login.microsoftonline/MSFT/office/._ThankYou.html   269 2016-12-19 01:23:06  25f6519919b6036168193d7567feafac

__MACOSX/login.microsoftonline/MSFT/._office         213 2018-01-19 11:59:10  1fe9002679b39f3728cf379c78a63a19
    File appears under 3 different file names
__MACOSX/login.microsoftonline/._MSFT                213 2018-01-19 11:58:40  1fe9002679b39f3728cf379c78a63a19
    File appears under 3 different file names
__MACOSX/._login.microsoftonline                     213 2018-01-19 11:58:40  1fe9002679b39f3728cf379c78a63a19
    File appears under 3 different file names
login.microsoftonline/MSFT/office/We are sorry.html 51504 2018-05-08 10:08:44  9b38563de79f4bbdee18c9c63326c3f7


2 Email addresses found:
    edwardsm166@gmail.com
    username=mnamero@hotmail.com (appears in 3 kits)



https://texasmalwareblog.blogspot.com   @phish_total