From "Accounts" [firstname.lastname@example.org]Attached is a file CCE06102015_00000.docm of which I have only seen a single sample, with a detection rate of 5/54. Analysis is pending, however this would appear to be the Dridex banking trojan.
Date Tue, 16 Feb 2016 02:15:52 -0700
Please find attached receipt
12-14 Leagrave Road