trickbot 12/12/2017

hxxp://atakan.com/nyRhdkwSD
hxxp://ragazzemessenger.com/nyRhdkwSD
hxxp://stubberne.dk/nyRhdkwSD
hxxp://vinyle.w8w.pl/nyRhdkwSD


<mcconf>
  <ver>1000102</ver>
  <gtag>mac1</gtag>
  <servs>
    <srv>79.106.41.9:449</srv>
    <srv>185.21.149.41:449</srv>
    <srv>200.111.97.235:449</srv>
    <srv>67.209.219.92:449</srv>
    <srv>209.205.188.238:449</srv>
    <srv>73.252.252.62:449</srv>
    <srv>76.16.105.16:449</srv>
    <srv>82.202.236.84:443</srv>
    <srv>78.155.199.124:443</srv>
    <srv>179.43.160.45:443</srv>
    <srv>94.250.253.142:443</srv>
    <srv>5.200.55.47:443</srv>
    <srv>37.60.177.19:443</srv>
    <srv>94.250.255.50:443</srv>
    <srv>82.146.48.44:443</srv>
    <srv>194.87.93.30:443</srv>
    <srv>194.87.94.225:443</srv>
    <srv>195.62.53.88:443</srv>
    <srv>82.146.48.241:443</srv>
    <srv>195.88.209.128:443</srv>
    <srv>80.87.198.204:443</srv>
    <srv>194.87.146.14:443</srv>
    <srv>195.133.147.140:443</srv>
    <srv>92.53.66.60:443</srv>
    <srv>194.87.93.84:443</srv>
    <srv>82.202.226.189:443</srv>
    <srv>95.154.199.136:443</srv>
  </servs>
  <autorun>
    <module name="systeminfo" ctl="GetSystemInfo"/>
    <module name="injectDll"/>
  </autorun>
</mcconf>