US insurance company may have paid one of the most expensive malware ransoms to date.