2017-08-11 Locky "Documents from <name>"

2017-08-11: #Locky email phishing campaign "Documents from <name>"
Samples: 40

Email sample:
-----------------------------------------------------------------------------------------------------------------
From: <Accounts@toplice.info>
To: [REDACTED]
Subject: Document From Monica
Date: Fri, 11 Aug 2017 17:33:29 +0530

Dear Customer,

Thank you for your recent order, please find attached your invoice.

All goods are supplied subject to our standard terms and conditions,
a copy of which is available on request.

Thank you once again for your order, we look forward to serving you againin the future.

Yours faithfully,

Monica

This e-mail and any files transmitted within it are private and confidential.
If you are not the intended recipient, this e-mail and any attachments within
it have been transmitted to you in error. You are prohibited from using,
copying, distributing or otherwise using the information contained herein

Attachment: I-7082.doc
-----------------------------------------------------------------------------------------------------------------
- sender address is Accounts@<domain>
- subject is "Document from <name>"
- attached file "I-<3-4 digits>.doc" is a MS Word macro-enable file which will download malware

Download sites and malware is same in https://pastebin.com/V2FbZHXb