From: Martine Hill [firstname.lastname@example.org]Attached is a file ROV_Report.doc which I have seen just a single variant of, this a VirusTotal detection rate of 2/55. The Malwr report indicates that the payload is identical to the one found in this spam run.
Date: 13 January 2016 at 09:17
Subject: INV 30/12/15
Sort code 30 98 69
Account no 00849096
Riverford Organic Farms
Riverford Organic Farms Ltd, Wash Barn, Buckfastleigh, TQ11 0JU
Registered in England No. 3731570