The .rtf document attached to the malicious email was designed to exploit a more recent vulnerability: CVE-20151641. If successful, this exploit launches a newer version of the same malware used in the August attempt outlined