From: Administrator [adminHb@victimdomain.tld]
Date: 5 May 2016 at 11:29
Subject: Statement 6BBC0E
Please See Attached
Scanned by MailDefender Plus, powered by Symantec Email Security.cloud
This email has been checked for viruses by Avast antivirus software.
It must be safe.. scanned by both Symantec and Avast! Well, of course that's just BS and the attached DOC file leads to malware, specifically the same payload as seen in this slightly earlier spam run.