The sole purpose of this malware seems to be to expose the anti-ISIS groups or people and annihilate them.
The message body contains a URL and tell the receiver to check about the reports of ISIS.
The email being sent to the rebels is given below
?
?
?
???
?
?
???
?
?
????
?
?
????
?
?
???
?
?
???
?
?
????
?
?
????
?
?
?????
?
?
????
?
?
???
?
?
????
?
?
???
?
?
????
?
?
????
?
?
???
?
?
???????
?
?
???
?
?
????
?
?
???
?https://tempsend [DOT]com/[Redacted]??
?
?
???
We are preparing a lengthy news report on the realities of life in Raqqah.
We have prepared a map of the city of Raqqah, in addition to a preliminary report.
We hope that you have a look at it with them and inform us of any errors.
The password for the zipped file is also present in the binary without encryption or obfuscation.
source: www.techworm.net
