Nemucod PHP variant - 06/29/2016

*Email sample*

_Subject_: Courier was unable to deliver the parcel, IDXXXXXXXXX

_Body_:

Dear Customer,

Your parcel has arrived at June 26. Courier was unable to deliver the parcel to you.
Shipment Label is attached to this email.

Sincerely,
Nathaniel Shaw,
Sr. Operation Manager.


In attachment a zip archive with a javascript file.

->Nemucod PHP variant<-

Javascript sample - MD5: dfcedaf4df86983865e4253029ded780
VT: 8/53 - https://virustotal.com/en/file/0a8f6b53cb49a76005897875d14c5e6e2aa6b9c4e4b24f16e60991e917f25c18/analysis

Distribution sites:

yolehamoise\.com
imfoodi\.com
decadence\.me
bloki\.internetdsl\.pl
www.drogariaglobo\.com\.br