Here's a quick summary so far of the last 24 hours of Dridex Macro Malware and how Sanesecurity ClamAV (badmacro.ndb) detected them...
Blue and Red lines are Dridex Macros being blocked.
compare the above samples submitted within 5 minutes of them
arriving... to VirusTotal
(as a simple guide to detection rates