An email with an attached zip file containing a,js file. Headers: “Rudolph Sheppard, attached is my resume. I look forward to hearing back from you,” says Rudolph Sheppard. The Zip file is an.JS file (JavaScript): “Sha256” Hashes: “9c3d11bf68f12e11e59824bc61079f1010db3949915a986a7f146e8b18aacbfa [1]””]
Source: http://sanesecurity.blogspot.com/2015/03/resume-rudolph-sheppard-zip.html