Nemucod PHP variant - 07/08/2016

*Email sample*

_Subject_: Courier was unable to deliver the parcel, IDXXXXXXXXXXX

_Body_:

Dear Customer,

We could not deliver your parcel.
You can review complete details of your order in the find attached.

Sincerely,
Dean Brewer,
Sr. Station Agent.


In attachment a zip archive with a javascript file.

->Nemucod PHP variant<-

Javascript sample - MD5: 5f9a8f54251c7ad9ecdc94e1693a3e90
VT: 15/52 - https://virustotal.com/en/file/209f773f1c072531115f855e658be1dedef75c443ca07c03ddf2a8185791b423/analysis

Distribution sites:

xn---42-5cdahd1ab4dh5lnc\.xn--p1ai
tehmashnpp\.ru
probilstein\.ru
ake-barrett\.com
fxpanda\.ru