4-24-2018: #Trickbot banker group_tag “ser0417” -> group_tag

___________      .__        __   ___.           __
\__    ___/______|__| ____ |  | _\_ |__   _____/  |_
  |    |  \_  __ \  |/ ___\|  |/ /| __ \ /  _ \   __\
  |    |   |  | \/  \  \___|    < | \_\ (  <_> )  |
  |____|   |__|  |__|\___  >__|_ \|___  /\____/|__|
                         \/     \/    \/

<mcconf>
   <ver>1000183</ver>
   <gtag>tt0002</gtag>
   <servs>
      <srv>74.58.90.102:449</srv>
      <srv>93.93.196.254:449</srv>
      <srv>46.20.207.204:449</srv>
      <srv>91.206.4.216:449</srv>
      <srv>69.122.117.95:449</srv>
      <srv>70.91.134.61:449</srv>
      <srv>68.96.73.154:449</srv>
      <srv>185.42.192.194:449</srv>
      <srv>189.84.125.37:449</srv>
      <srv>185.26.174.189:443</srv>
      <srv>79.175.102.12:449</srv>
      <srv>90.63.223.63:449</srv>
      <srv>207.140.15.87:449</srv>
      <srv>176.121.215.149:449</srv>
      <srv>68.227.31.46:449</srv>
      <srv>199.120.119.164:449</srv>
      <srv>107.144.49.162:449</srv>
      <srv>130.180.89.70:449</srv>
      <srv>78.155.218.104:443</srv>
      <srv>80.87.198.156:443</srv>
      <srv>82.146.48.3:443</srv>
      <srv>94.250.254.100:443</srv>
      <srv>94.250.252.154:443</srv>
      <srv>195.54.163.80:443</srv>
      <srv>94.103.80.84:443</srv>
      <srv>195.133.1.111:443</srv>
      <srv>91.235.129.212:443</srv>
      <srv>94.103.82.138:443</srv>
      <srv>185.159.128.224:443</srv>
      <srv>104.193.252.171:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>


<mcconf>
   <ver>1000177</ver>
   <gtag>ser0417</gtag>
   <servs>
      <srv>185.142.21.108:449</srv>
      <srv>69.122.117.95:449</srv>
      <srv>185.21.36.222:449</srv>
      <srv>70.91.134.61:449</srv>
      <srv>68.96.73.154:449</srv>
      <srv>185.42.192.194:449</srv>
      <srv>189.84.125.37:449</srv>
      <srv>185.26.174.189:443</srv>
      <srv>79.175.102.12:449</srv>
      <srv>65.123.48.221:449</srv>
      <srv>90.63.223.63:449</srv>
      <srv>207.140.15.87:449</srv>
      <srv>89.37.56.24:449</srv>
      <srv>176.121.215.149:449</srv>
      <srv>93.181.186.127:451</srv>
      <srv>82.214.141.134:449</srv>
      <srv>68.227.31.46:449</srv>
      <srv>199.120.119.164:449</srv>
      <srv>107.144.49.162:449</srv>
      <srv>130.180.89.70:449</srv>
      <srv>193.33.8.98:449</srv>
      <srv>185.159.128.158:443</srv>
      <srv>185.228.232.112:443</srv>
      <srv>91.240.85.23:443</srv>
      <srv>94.103.82.120:443</srv>
      <srv>85.143.214.77:443</srv>
      <srv>185.174.173.130:443</srv>
      <srv>185.228.233.160:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>