ALIBABA.COM phish running on aarcube[.]com

Found: 2018-09-26 23:16:54.767000
URL: https://aarcube.com/wp-includes/alibaba.zip
File: aarcube.com-wp-includes-alibaba.zip
Domain: aarcube.com
Target: ALIBABA.COM
Name                                               Size Date                 MD5                                alibaba/images/img1.jpg                            67030 2016-03-01 13:07:30  d01105df200d9d0309bed3a8b5c26815
    File appears in 42 kits  and under 2 different file names
alibaba/images/img2.png                            335152 2015-05-21 23:27:56  bb34415167f5776f8918e004bd05ab0d
    File appears in 182 kits  and under 2 different file names
alibaba/images/img3.gif                             1380 2015-05-21 23:28:04  de1d32379d27e9caa603ee7fdbfcc4e2
    File appears in 192 kits  and under 2 different file names
alibaba/images/img4.gif                            59977 2015-05-21 23:28:12  62db9d89ce236e6410884ecb6e803f0c
    File appears in 169 kits
alibaba/images/Thumbs.db                           10752 2015-05-21 23:29:24  ab70cfa9398e49b27437bd05540f4ed5
    File appears in 164 kits
alibaba/post1.php                                    705 2018-01-08 09:20:24  aed65bda087a6c7c811a97c246cdc6eb
    File appears in 3 kits
alibaba/vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc.php  6679 2016-03-01 14:47:30  dfb376dc08de10a6a99d95dffec0b2de
    File appears in 59 kits  and under 4 different file names

1 Email addresses found:
    shkim.qdcmico@gmail.com (appears in 8 kits)



https://texasmalwareblog.blogspot.com   @phish_total