6-11-2018: #TrickBot #IOCs

<mcconf>
   <ver>1000210</ver>
   <gtag>tt0002</gtag>
   <servs>
      <srv>188.124.167.132:449</srv>
      <srv>93.109.242.134:443</srv>
      <srv>41.211.9.226:443</srv>
      <srv>158.58.131.54:443</srv>
      <srv>36.74.100.211:449</srv>
      <srv>87.255.24.238:449</srv>
      <srv>200.111.167.227:449</srv>
      <srv>109.86.227.152:443</srv>
      <srv>85.172.38.59:449</srv>
      <srv>190.4.189.129:443</srv>
      <srv>65.30.201.40:443</srv>
      <srv>66.232.212.59:443</srv>
      <srv>80.53.57.146:443</srv>
      <srv>182.253.210.130:449</srv>
      <srv>155.133.31.21:449</srv>
      <srv>94.112.52.197:449</srv>
      <srv>209.121.142.202:449</srv>
      <srv>5.102.177.205:449</srv>
      <srv>209.121.142.214:449</srv>
      <srv>185.42.192.194:449</srv>
      <srv>144.48.51.8:443</srv>
      <srv>185.174.172.180:443</srv>
      <srv>185.249.255.31:443</srv>
      <srv>185.174.173.138:443</srv>
      <srv>92.63.107.235:443</srv>
      <srv>62.109.16.54:443</srv>
      <srv>92.53.67.19:443</srv>
      <srv>89.223.88.121:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>


<servconf>
<expir>NA</expir>
<plugins>
        <psrv>185.251.38.110:447</psrv>
        <psrv>185.228.233.225:447</psrv>
        <psrv>80.87.198.228:447</psrv>
        <psrv>149.154.70.111:447</psrv>
        <psrv>89.223.88.101:447</psrv>
</plugins>