Date: Fri, 15 Nov 2013 12:05:36 -0500 [12:05:36 EST]
From: RingCentral [email@example.com]
Subject: New Fax Message on 11/15/2013 at 09:51:51 CST
You Have a New Fax Message
Bank of America
11/15/2013 at 09:51:51 CST
To view this message, please open the attachment.
Thank you for using Ring Central .
There is an attachment 442074293440-1116-084755-242.zip which unzips into a malicious exectuable 442074293440-1116-084755-242.exe which has a VirusTotal detection rate of 11/47. Automated analysis tools   show an attempted connection to aspenhonda.com on 126.96.36.199 (FAM Info Systems / ServInt, US). The domain in question has been hacked, it is not possible to tell if the entire server is compromised but there are other legitimate sites on that box.