word document malware: INCOMING FAX REPORT

New word attachment, loaded with a Rich Text Format document to download malware.

This time, it's an incoming fax...

Date: Thu, 11 Dec 2014 03:17:44 -0800
From: "Incoming Fax"
Subject: INCOMING FAX REPORT : Remote ID: 794-474-7335

*********************************************************
INCOMING FAX REPORT
*********************************************************

Date/Time: Thu, 11 Dec 2014 03:17:44 -0800
Speed: 4924bps
Connection time: 00:06
Pages: 9
Resolution: Normal
Remote ID: 372-573-3700
Line number: 8
DTMF/DID:
Description: Internal Docs

Fax message attached in DOC format (Microsoft Word).

********************************************************* 

FaxMessage47412-872321.doc

One version at the moment... hash: 56b2227ce5ce8e82eb93e70191a5efaf

VirusTotal reports [1/56] virus scanners are hitting on the hash.

Sanesecurity.Rogue.0hr.20141211-1227 is currently blocking this one