Nemucod PHP variant - 06/24/2016

*Email sample*

_Subject_: Problems with item delivery, n.XXXXXXXXXXX

_Body_:

Dear Customer,

We could not deliver your item.
Please, download Delivery Label attached to this email.

Kind regards,
Neil Osborn,
Operation Manager.


In attachment a zip archive with a javascript file.

->Nemucod PHP variant<-

Javascript sample - MD5: 5483fbf4d4a7810b6a887403b4f85c5a
VT: 9/55 - https://virustotal.com/en/file/b3e3f40ab35c55ea3c50c55ca9f0229252e54027378f99131db7f429e08e23ee/analysis/

Distribution sites:

xn--69-6kcia4af1cchlv\.xn--p1ai
www.website43\.ru
xn--80adehatavpchebumw6c5a1f\.xn--p1ai
xn----7sbabh0bdoslin5s\.xn--p1ai
www.xn--80acysaebioq5f\.xn--p1ai