Trickbot gtag mon102,103,105 samples 3-3-21

Trickbot Samples from 195.123.219.72/uploads/files/

Example XLSB mon103 loader from @wato_dn:
https://tria.ge/210304-rvbd77nwva

mon102.dll = https://tria.ge/210303-7ctjkdz7xx
https://bazaar.abuse.ch/sample/ff6554ab27fa28c602add0c4824a651b42f0d9b45e7d0a758ba66e2e650598db/

mon103.dll = https://tria.ge/210303-8hrhlzxfbx
https://bazaar.abuse.ch/sample/4753a98480bfe6aa5685edb0456642679f4e49cdf94724151f53a191a75811db/

m105.dll = https://tria.ge/210303-fyt7bh51fa
https://bazaar.abuse.ch/sample/c486a02bb56748a663dfcfca68847f33c93574aaba9d326685129d7b664abbb5/

all three are version 100013 for mcconf with the following C2s:
103.225.138.94:449
122.2.28.70:449
123.200.26.246:449
131.255.106.152:449
142.112.79.223:449
154.126.176.30:449
180.92.238.186:449
187.20.217.129:449
201.20.118.122:449
202.91.41.138:449
95.210.118.90:449

other sites for downloads as reported by @james_inthe_box/@wato_dn:
http://195.123.219.72/haurf/n2/n2
https://mvisionproperties.com/fonts/mon103.dll
https://deeptest.prep.co.in/transection/job-work/OutSide/JobWorkChallan/print/mon103.dll
https://bwsr.eu/4/themes/js/css/mon103.dll
https://vms.prep.co.in/design/404/1/css/overlays/mon103.dll

http://195.123.219.72/haurf/c/c
https://ozpinarco.com/wp-content/themes/archi-child/images/prettyPhoto/m105.dll