4-19-2018: #Trickbot banking malware gang group tag "spm19"

Smoke Loader download:
http://5.149.253[.]100/sg3.exe
http://185.117.88[.]96/sg3.exe


Trickbot IOCs:
<plugins>
<psrv>31.131.27.106:448</psrv>
<psrv>195.123.216.102:447</psrv>
<psrv>195.123.212.185:447</psrv>
<psrv>85.143.174.196:447</psrv>
<psrv>185.159.129.198:447</psrv>
<psrv>194.87.109.32:447</psrv>
<psrv>54.38.141.199:447</psrv>
<psrv>185.203.118.50:447</psrv>
</plugins>

<srv>195.123.216.115:443</srv>
<srv>185.20.187.13:443</srv>
<srv>185.242.179.118:443</srv>
<srv>62.109.26.208:443</srv>
<srv>213.183.51.54:443</srv>
<srv>62.109.24.176:443</srv>
<srv>185.242.179.123:443</srv>
<srv>62.109.27.196:443</srv>
<srv>185.174.174.156:443</srv>
<srv>37.230.112.146:443</srv>
<srv>185.174.174.72:443</srv>
<srv>137.74.150.73:443</srv>