Nemucod PHP variant - 07/07/2016

*Email sample*

_Subject_: Shipment delivery problem #XXXXXXXX

_Body_:

Dear Customer,

Your parcel has arrived at July 04. Courier was unable to deliver the parcel to you.
Please, open email attachment to print shipment label.

Yours faithfully,
Jared Hurley,
FedEx Delivery Manager.


In attachment a zip archive with a javascript file.

->Nemucod PHP variant<-

Javascript sample - MD5: 86c044c7cd0bd9d9241b663bece1abe2
VT: 13/55 - https://virustotal.com/en/file/d4aab1855dddd4a3103a4706f6976d6c280e75eab114da99f36af4a2c099ff33/analysis

Distribution sites:

taganka64\.ru
fotomi\.ru
pervaya-kniga\.ru
mhpidesign\.ru
llccct\.ru