The phishing message uses the subject “Azovstal” and a weaponized office document. Upon opening the attachment and enabling the macro, it will start the infection process.