ALIBABA phish running on daskals[.]com

Found: 2018-04-13 07:37:18.189000
URL: http://daskals.com/guptasana.com/www.alibaba.com.zip
File: daskals.com-guptasana.com-www.alibaba.com.zip
Domain: daskals.com
Target: ALIBABA
Name                                               Size Date                 MD5                                www.alibaba.com/alibaba/images/img1.jpg            67030 2016-12-12 07:21:00  d01105df200d9d0309bed3a8b5c26815
    File appears in 39 kits  and under 2 different file names
www.alibaba.com/alibaba/images/img2.png            335152 2016-12-12 07:21:00  bb34415167f5776f8918e004bd05ab0d
    File appears in 167 kits  and under 2 different file names
www.alibaba.com/alibaba/images/img3.gif             1380 2016-12-12 07:21:00  de1d32379d27e9caa603ee7fdbfcc4e2
    File appears in 179 kits  and under 2 different file names
www.alibaba.com/alibaba/images/img4.gif            59977 2016-12-12 07:21:00  62db9d89ce236e6410884ecb6e803f0c
    File appears in 156 kits
www.alibaba.com/alibaba/images/Thumbs.db           10752 2016-12-12 07:21:00  ab70cfa9398e49b27437bd05540f4ed5
    File appears in 151 kits
www.alibaba.com/alibaba/post1.php                    709 2016-12-12 07:22:20  d7b081cba1a32f02b9ef237cfd65e6b2
    File appears in 6 kits
www.alibaba.com/alibaba/vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc.php  6679 2016-12-12 07:21:00  dfb376dc08de10a6a99d95dffec0b2de
    File appears in 54 kits  and under 4 different file names

1 Email addresses found:
    dprincewirewire@gmail.com (appears in 11 kits)



https://texasmalwareblog.blogspot.com   @phish_total