2016-12-02 Locky "Attached document"

2016-12-02 #locky email phishing camapign "Attached document"

Email sample:
---------------------------------------------------------------------------------------------------------------
From: canon@[REDACTED]
To: [REDACTED]
Subject: Attached document
Date: Fri, 02 Dec 2016 23:50:34 +0700

Attachment: 8606_0059.docm
---------------------------------------------------------------------------------------------------------------
- sender is canon@<recipient domain>
- subject is "Attached document"
- email body is empty
- attached file "<4 digits>_<3-4 digits>.docm" is Microsoft Word file with embedded macro that will download malware from:

Download sites, Malware etc... is same as in "Please Pay Attention" campaign http://pastebin.com/Cwjfp9SR