2016-12-12 Locky "New(xxx)"

2016-12-12: #locky email phishing campaign "New(xxx)"
http://blog.dynamoo.com/2016/12/malware-spam-new910-leads-to-locky.html

Email sample:
---------------------------------------------------------------------------------------------------------------
From: "Tonia" <Tonia877@[REDACTED]>
To: [REDACTED]
Subject: New(63)
Date: Mon, 12 Dec 2016 17:21:53 +0700

Scanned by CamScanner

Sent from Yahoo Mail on Android

Attachment: New(63).docm
---------------------------------------------------------------------------------------------------------------
- sender varies between emails, but sender domain is faked to be same as recipient's
- subject is "New(<1-3 digits>)"
- attached file "New(<1-3 digits>).docm" (same as in the subject line) is Microsoft Word file containing macro that will download the malware

Download locations, malware etc. is same as for "Attached, Copy, Emailing, File" campaign http://pastebin.com/7rvsVkSN