ALIBABA phish running on saintannspublicschool[.]com

Found: 2018-01-12 21:15:26.139000
URL: http://saintannspublicschool.com/admin/Alibaba.zip
File: saintannspublicschool.com-admin-Alibaba.zip
Domain: saintannspublicschool.com
Target: ALIBABA
Name                                               Size Date                 MD5                                Alibaba.com/Alibaba/dhl.html                        6997 2016-11-06 20:07:42  36a1e60abb19a75a7ed5e1ebeb6c5ea4

Alibaba.com/Alibaba/images/img1.jpg                67030 2016-11-06 20:08:00  d01105df200d9d0309bed3a8b5c26815
    File appears in 33 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img2.png                335152 2016-11-06 20:08:12  bb34415167f5776f8918e004bd05ab0d
    File appears in 142 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img3.gif                 1380 2016-11-06 20:08:18  de1d32379d27e9caa603ee7fdbfcc4e2
    File appears in 155 kits  and under 2 different file names
Alibaba.com/Alibaba/images/img4.gif                59977 2016-11-06 20:08:26  62db9d89ce236e6410884ecb6e803f0c
    File appears in 133 kits
Alibaba.com/Alibaba/loader1.htm                     8356 2016-11-06 20:07:28  2a151bfb0863811fe06cda9c9b11bef8
    File appears in 14 kits
Alibaba.com/Alibaba/Login.alibaba.com.php           6938 2016-11-06 20:07:34  0a874bfd77ef9e883bf0f0c42c5d08bf

Alibaba.com/Alibaba/post1.php                       1975 2018-01-11 05:43:44  8ad93876a8be3abcd5b460e5a0167f8c


2 Email addresses found:
    shkim.qdcmico@gmail.com
    wirez@googledocs.org (appears in 118 kits)



https://texasmalwareblog.blogspot.com   @phish_total