Malware
Squirrelwaffle
aka DatopLoader
According to Sophos, Squirrelwaffle is a malware loader that is distributed as a malicious Office document in spam campaigns.
Squirrelwaffle, also known as DatopLoader, is a Windows malware family.
Background
Sophos describes Squirrelwaffle as a malware loader spread through spam campaigns in the form of a malicious Office document. It hands attackers an initial foothold in the target environment and a means to push additional malware onto systems. After a recipient opens an infected document and enables macros, a Visual Basic script generally fetches and runs malicious files and scripts, handing the attacker greater control over the machine. The operators also rely on DocuSign branding to coax victims into enabling macros in the Office documents.
Source: Malpedia (Fraunhofer FKIE).