ALIBABA phish running on dsbcplibrary[.]org

Found: 2018-09-06 14:17:25.875000
URL: http://dsbcplibrary.org/alibaba.com.zip
File: dsbcplibrary.org-foo-alibaba.com.zip
Domain: dsbcplibrary.org
Target: ALIBABA
Name                                               Size Date                 MD5                                alibaba.com/images/clear.png                          81 2017-03-15 08:10:12  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 32 kits  and under 9 different file names
alibaba.com/images/data/89.js                      166101 2017-03-14 20:53:40  33a3b039ef1c11349209a3f003f908a2
    File appears in 10 kits  and under 2 different file names
alibaba.com/images/data/clear.png                     81 2017-03-14 20:53:54  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 32 kits  and under 9 different file names
alibaba.com/images/data/havana.css                  4760 2017-03-14 20:54:00  f720eb7e550b99282a990906758d8b22
    File appears in 10 kits
alibaba.com/images/data/JSocket.swf                 1513 2017-03-14 20:53:48  e9724572d37e5ca98abd364302146b6a
    File appears in 10 kits
alibaba.com/images/data/mini-login-form-min.css    20083 2017-03-14 20:54:06  83fed11ae6615bab01049bc0f08f8c52
    File appears in 10 kits
alibaba.com/images/data/mini-login-min.js          146702 2017-03-14 20:54:12  4076ec66d46bdf4be807047527cfff74
    File appears in 9 kits
alibaba.com/images/data/nc.js                      105988 2017-03-14 20:54:24  bf72a11f68986b6b02fc90d5e9bd7e4b
    File appears in 10 kits
alibaba.com/images/data/uab.js                       542 2017-03-14 20:54:30  49246308b1fdac8b564e28b96446b44e
    File appears in 10 kits
alibaba.com/images/data/um.js                      32896 2017-03-14 20:54:38  b70676a69b87663f8b9b9f4dce08bdef
    File appears in 10 kits
alibaba.com/images/footer.css                       7310 2017-03-15 08:10:18  374e2b45e8ee13c1dabc598767ef6168
    File appears in 12 kits
alibaba.com/images/login.htm                       36857 2017-05-06 13:55:00  f23851a74f7b7b99a1d0762d48207ee3
alibaba.com/images/TB1awf5PXXXXXXLXFXXXXXXXXXX-585-350.jpg 28956 2017-03-15 08:10:22  b4ea5d8bed9945018ea3a324425871a1
    File appears in 10 kits
alibaba.com/images/TB1ROn8OpXXXXbZaXXXXXXXXXXX-32-31.png  1699 2017-03-15 08:10:24  c738d961dd8d36206c8956302a703041
    File appears in 10 kits
alibaba.com/Login.htm                              15444 2018-06-12 21:02:50  d4a3150c2338e22aea6aa4dd8ce7d3fd
alibaba.com/redirect.php                             775 2017-05-10 21:18:08  af4fba528ccdc7ec0427cd5bb1e6d77d

2 Email addresses found:
    callmepog101@gmail.com (appears in 3 kits)
    outdoor.darwincn@outlook.com



https://texasmalwareblog.blogspot.com   @phish_total