SHOW:
|
|
- or go back to the newest paste.
| 1 | *Email sample* | |
| 2 | ||
| 3 | - | _Subject_: Courier was unable to deliver the parcel, IDXXXXXXXXX |
| 3 | + | _Subject_: Problem with parcel shipping, IDXXXXXXXXX |
| 4 | ||
| 5 | _Body_: | |
| 6 | ||
| 7 | Dear Customer, | |
| 8 | ||
| 9 | - | Your parcel has arrived at June 26. Courier was unable to deliver the parcel to you. |
| 9 | + | We could not deliver your item. |
| 10 | - | Shipment Label is attached to this email. |
| 10 | + | Please, open email attachment to print shipment label. |
| 11 | ||
| 12 | Sincerely, | |
| 13 | - | Nathaniel Shaw, |
| 13 | + | Cecil Poole, |
| 14 | - | Sr. Operation Manager. |
| 14 | + | Delivery Manager. |
| 15 | ||
| 16 | ||
| 17 | In attachment a zip archive with a javascript file. | |
| 18 | ||
| 19 | ->Nemucod PHP variant<- | |
| 20 | ||
| 21 | - | Javascript sample - MD5: dfcedaf4df86983865e4253029ded780 |
| 21 | + | Javascript sample - MD5: 81c54db2dc24232f16db338391743d29 |
| 22 | - | VT: 8/53 - https://virustotal.com/en/file/0a8f6b53cb49a76005897875d14c5e6e2aa6b9c4e4b24f16e60991e917f25c18/analysis |
| 22 | + | VT: 9/53 - https://virustotal.com/en/file/3315f5ddb82acd2c80ef9ef880391ba2b28edabf2c269c158d0fe70b9f94f074/analysis/ |
| 23 | ||
| 24 | Distribution sites: | |
| 25 | ||
| 26 | - | yolehamoise\.com |
| 26 | + | nalogi-vse\.ru |
| 27 | guegatec\.com | |
| 28 | - | decadence\.me |
| 28 | + | |
| 29 | - | bloki\.internetdsl\.pl |
| 29 | + | www.drogariaglobo\.com.br |
| 30 | - | www.drogariaglobo\.com\.br |
| 30 | + | bloki\.internetdsl\.pl |