Nemucod PHP variant - 06/29/2016

*Email sample*

_Subject_: Problem with parcel shipping, IDXXXXXXXXX

_Body_:

Dear Customer,

We could not deliver your item.
Please, open email attachment to print shipment label.

Sincerely,
Cecil Poole,
Delivery Manager.


In attachment a zip archive with a javascript file.

->Nemucod PHP variant<-

Javascript sample - MD5: 81c54db2dc24232f16db338391743d29
VT: 9/53 - https://virustotal.com/en/file/3315f5ddb82acd2c80ef9ef880391ba2b28edabf2c269c158d0fe70b9f94f074/analysis/

Distribution sites:

nalogi-vse\.ru
guegatec\.com
imfoodi\.com
www.drogariaglobo\.com.br
bloki\.internetdsl\.pl