3-9-2018: #Trickbot banker #malware gtag “tot2” w/ version 1

<mcconf>
   <ver>1000140</ver>
   <gtag>tt0002</gtag>
   <servs>
      <srv>212.14.51.43:449</srv>
      <srv>212.14.51.56:449</srv>
      <srv>195.133.146.92:443</srv>
      <srv>194.87.94.8:443</srv>
      <srv>92.53.91.252:443</srv>
      <srv>185.228.233.174:443</srv>
      <srv>109.234.38.22:443</srv>
      <srv>82.202.204.172:443</srv>
      <srv>185.246.64.65:443</srv>
      <srv>94.250.253.69:443</srv>
      <srv>81.177.140.199:443</srv>
      <srv>217.107.219.15:443</srv>
      <srv>109.234.35.230:443</srv>
      <srv>89.223.31.219:443</srv>
      <srv>185.246.64.156:443</srv>
      <srv>94.250.253.74:443</srv>
      <srv>54.38.49.80:443</srv>
      <srv>185.246.64.221:443</srv>
      <srv>94.103.80.99:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>