Play-2617 DocuSign Phishing
You received invoice from DocuSign Electronic Signature Service
DocuSign Signature and Invoice Service [email protected]
This one lives here: https://docs.google.com/document/d/e/2PACX-1vRgWlpv8SawGms6n-bQPKp4j3_rT0XGz4tiQ9cr7j_LagJKVwmx7TT8PnzSOv3XPfipiEhBQbihplLE/pub
Which takes you here: http://www.serve-tour.com/polygamous.php
Then here: https://www.docusign.com/?download=0202_384807601456.doc
And then downloads this Word Document:
Which we passed up on opening...
No virus messages or error so the macro is probably just about sending email with your contacts in or similar.