Trickbot 13/06/2017

Xor key: sV9CE2VOWZKFF0w7JQvhVLMj8Cls9Ox3
XORed payload hash: 33fef4be658bcb95adc710309c39fc1410f14d08ee005405428cc76f896d15a4
UnXORed payload hash: 9a928671d2c9e7d1d1ee56df6dbe94133180a95a0a389656e900d663c35dd092

TrickBot payload delivery domains (13/06/2017):

hxxp://78tguyc876wwirglmltm.net/af/dfg4g4
hxxp://ashishubha.com/dfg4g4
hxxp://ayurvoyage.com/dfg4g4
hxxp://chaiselounge.com.au/dfg4g4
hxxp://chefmarco.it/dfg4g4
hxxp://cisroad.com/dfg4g4
hxxp://cityplay-schoenebeck.de/dfg4g4
hxxp://colorglobe.in/dfg4g4
hxxp://creativedigital.es/dfg4g4
hxxp://e67tfgc4uybfbnfmd.org/af/dfg4g4
hxxp://lscconsulting.org/dfg4g4
hxxp://maghrebex.com/dfg4g4
hxxp://metrowestauction.com/dfg4g4
hxxp://mirai2000.com/dfg4g4
hxxp://molossi.com.au/dfg4g4
hxxp://movementmatters.biz/dfg4g4
hxxp://musicacurti.it/dfg4g4
hxxp://sakuracli.com/dfg4g4
hxxp://satin-lux.de/dfg4g4
hxxp://schucktextil.de/dfg4g4
hxxp://sfv-osterspai.de/dfg4g4
hxxp://siamguesthouse-pattaya.com/dfg4g4
hxxp://skinsolutions.co.uk/dfg4g4
hxxp://skynetwork.com.au/dfg4g4
hxxp://stalaktit-indonesia.com/dfg4g4
hxxp://steadies.nl/dfg4g4
hxxp://sudhirchaudhary.com/dfg4g4
hxxp://superbrain.eu/dfg4g4
hxxp://superdamp.com/dfg4g4
hxxp://xaman.es/dfg4g4
hxxp://yanghairun.com/dfg4g4
hxxp://yes-photo.ru/dfg4g4
hxxp://zipdesignbo.com/dfg4g4