5-16-=2018: #TrickBot #malware loader version 1000194

<mcconf>
   <ver>1000194</ver>
   <gtag>tt0002</gtag>
   <servs>
      <srv>209.121.142.202:449</srv>
      <srv>5.102.177.205:449</srv>
      <srv>209.121.142.214:449</srv>
      <srv>95.161.180.42:449</srv>
      <srv>203.86.222.142:443</srv>
      <srv>173.220.6.194:449</srv>
      <srv>179.107.89.145:449</srv>
      <srv>46.20.207.204:443</srv>
      <srv>69.122.117.95:449</srv>
      <srv>68.96.73.154:449</srv>
      <srv>185.42.192.194:449</srv>
      <srv>189.84.125.37:443</srv>
      <srv>68.227.31.46:449</srv>
      <srv>107.144.49.162:443</srv>
      <srv>46.72.175.17:449</srv>
      <srv>144.48.51.8:443</srv>
      <srv>46.243.179.212:449</srv>
      <srv>81.177.255.76:449</srv>
      <srv>37.230.112.67:443</srv>
      <srv>92.53.78.159:443</srv>
      <srv>92.53.77.41:443</srv>
      <srv>185.159.130.203:443</srv>
      <srv>91.235.129.76:443</srv>
      <srv>37.46.128.226:443</srv>
      <srv>185.249.255.77:443</srv>
      <srv>37.230.114.164:443</srv>
      <srv>109.234.37.39:443</srv>
      <srv>89.223.31.103:443</srv>
      <srv>80.93.182.201:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>