Malware spam: "Unauthorised bank account activity"

This fake financial spam comes with a malicious payload. It appears to be randomly generated in part, the actual emails says..

Subject:  Unauthorised bank account activity

Kindly be informed that bank had noticed suspicious attempt of money withdrawal regarding Your Mastercard account.
Please check the enclosed bank warning sent by bank manager today.
As well attached are personal details for Your approval.
Mathew Diaz
Tax Officer


shadow_new
Attached is a Word document with various filenames:

extract_of_bank_document.doc
fragment_of_bank_fax.doc
original_of_bank_report.doc
scan-copy_of_bank_document.doc
transcript_of_bank_statement.doc

All the samples we have seen have an identical document with different names, containing this malicious macro which then goes off and downloads various malware files.


shadow_new

unauth