Date: Tue, 3 Dec 2013 15:15:03 -0800 [18:15:03 EST]Attached is a ZIP file which in this case is called -2322693863-6422657608-20130705409306-09249.zip (with a VirusTotal detection rate of 6/48) which in turn contains a malicious executable fax-report.exe which has an icon that makes it look like a PDF file and has a VirusTotal detection rate of 4/48.
From: eFax Corporate [email@example.com]
Subject: Fax transmission: -5219616961-5460126761-20130705352854-84905.zip
Please find attached to this email a facsimile transmission we have just received on your behalf
(Do not reply to this email as any reply will not be read by a real person)
   show an attempted communication with tuhostingprofesional.net on 18.104.22.168 (GoDaddy, Netherlands) which contains about 8 legitimate domains which may or may not have been compromised.