Since the infected binary was hosted on Dropbox, I emailed Dropbox and asked them to remove the file. They replied:
The email you are reporting is fake and not sent by Dropbox. It contains a link to a file hosted by a Dropbox user, but that file is either spam, malware, or a "phishing" page...