Date: Thu, 26 Jun 2014 06:19:42 -0700 [09:19:42 EDT]
From: USPS Express [email@example.com]
Subject: Parcel Invoice
A parcel was sent to our office for you and we have tried to deliver it several times to your address on file.
Attached is the receipt used in sending you the parcel. We advise you to download and reconfirm the address on receipt if its your valid address.
View Receipt Here
Thanks for your cooperation.
Priority Mail Express
The link in the email I had was broken, but was attempting to redirect to:
and from there to:
This .zip file contains a malicious executable invoice.com (a .com file.. that really is old school) which has a VirusTotal detection rate of 29/54. The Malwr report shows an attempted connection to klempfrost.zapto.org on 184.108.40.206 (Internap, US). Other automated analysis tools are less conclusive  .