Menlo Labs has been tracking a malware campaign known as the GootLoader Campaign that delivers an archive file with an embedded JS to the endpoint.