From: Meagan BranchThe senders vary from email to email. Attached is a ZIP file with a malicious script, which in the examples that I have found downloads one of a variety of malicious executables     which call home to the same IP addresses found in this earlier spam run.
Date: 27 May 2016 at 12:35
Subject: Information request
As per our discussion yesterday, please find attached the amended meeting minutes.
I have accepted the majority of the changes requested, however there are some that I have left in the document.
I have included the edits as track changes.
Please confirm that the changes we have made are acceptable.
Oramed Pharmaceuticals Inc.
Phone: +1 (620) 980-41-94