vk_intel

3-21-2018: #Trickbot banking malware gtags “ser0321/tt002” v

Mar 21st, 2018
525
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.50 KB | None | 0 0
  1. <mcconf>
  2. <ver>1000149</ver>
  3. <gtag>ser0321</gtag>
  4. <servs>
  5. <srv>212.14.51.56:443</srv>
  6. <srv>212.14.51.43:443</srv>
  7. <srv>109.234.37.80:443</srv>
  8. <srv>185.174.172.155:443</srv>
  9. <srv>85.143.217.2:443</srv>
  10. <srv>194.87.237.55:443</srv>
  11. <srv>176.103.62.18:443</srv>
  12. <srv>78.140.221.157:443</srv>
  13. <srv>149.202.30.10:443</srv>
  14. <srv>109.234.34.213:443</srv>
  15. </servs>
  16. <autorun>
  17. <module name="systeminfo" ctl="GetSystemInfo" />
  18. <module name="injectDll" />
  19. </autorun>
  20. </mcconf>
  21.  
  22.  
  23. <mcconf>
  24. <ver>1000150</ver>
  25. <gtag>tt0002</gtag>
  26. <servs>
  27. <srv>109.173.183.245:449</srv>
  28. <srv>31.134.60.181:449</srv>
  29. <srv>85.28.129.209:449</srv>
  30. <srv>82.214.141.134:449</srv>
  31. <srv>81.227.0.215:449</srv>
  32. <srv>31.172.177.90:449</srv>
  33. <srv>185.55.64.47:449</srv>
  34. <srv>212.14.51.56:443</srv>
  35. <srv>212.14.51.43:443</srv>
  36. <srv>109.234.37.80:443</srv>
  37. <srv>85.143.217.2:443</srv>
  38. <srv>194.87.237.55:443</srv>
  39. <srv>78.140.221.157:443</srv>
  40. <srv>109.234.34.213:443</srv>
  41. <srv>185.242.179.143:443</srv>
  42. <srv>185.174.173.67:443</srv>
  43. <srv>94.103.82.171:443</srv>
  44. </servs>
  45. <autorun>
  46. <module name="systeminfo" ctl="GetSystemInfo" />
  47. <module name="injectDll" />
  48. </autorun>
  49. </mcconf>
  50.  
  51.  
  52. <mail>
  53. <handler>185.180.197.58:443</handler>
  54. </mail>
Add Comment
Please, Sign In to add comment