Trickbot Oct 4

exe links:
hill-familie.de/ser1004.png
diga-consult.de/ser1004.png

<mcconf>
   <ver>1000063</ver>
   <gtag>ser1004</gtag>
   <servs>
      <srv>91.83.88.51:449</srv>
      <srv>89.231.13.38:449</srv>
      <srv>75.107.84.190:449</srv>
      <srv>187.232.150.175:449</srv>
      <srv>46.237.117.193:449</srv>
      <srv>85.221.243.6:449</srv>
      <srv>166.70.170.198:449</srv>
      <srv>162.255.93.51:449</srv>
      <srv>77.250.120.93:449</srv>
      <srv>194.87.99.21:443</srv>
      <srv>195.133.196.130:443</srv>
      <srv>194.87.103.184:443</srv>
      <srv>194.87.102.14:443</srv>
      <srv>78.24.217.227:443</srv>
      <srv>195.133.197.9:443</srv>
      <srv>92.63.102.64:443</srv>
      <srv>194.87.236.59:443</srv>
      <srv>82.146.40.206:443</srv>
      <srv>194.87.238.53:443</srv>
      <srv>195.133.48.67:443</srv>
      <srv>195.133.144.237:443</srv>
      <srv>82.146.59.247:443</srv>
      <srv>194.87.92.191:443</srv>
      <srv>194.87.239.28:443</srv>
      <srv>82.146.47.127:443</srv>
      <srv>82.146.56.32:443</srv>
      <srv>5.101.78.112:443</srv>
      <srv>185.158.153.134:443</srv>
      <srv>195.133.146.232:443</srv>
      <srv>188.227.75.224:443</srv>
      <srv>95.154.199.82:443</srv>
   </servs>
   <autorun>
      <module name="systeminfo" ctl="GetSystemInfo" />
      <module name="injectDll" />
   </autorun>
</mcconf>