7-1-2018: #TrickBot banker version 1000220

<mcconf>
<ver>1000220</ver>
<gtag>tt0002</gtag>
<servs>
	<srv>138.34.32.218:443</srv>
	<srv>178.78.202.189:443</srv>
	<srv>47.40.90.210:443</srv>
	<srv>93.109.242.134:443</srv>
	<srv>45.36.155.244:443</srv>
	<srv>158.58.131.54:443</srv>
	<srv>46.59.89.119:449</srv>
	<srv>172.117.118.98:443</srv>
	<srv>45.56.2.247:443</srv>
	<srv>109.86.227.152:443</srv>
	<srv>209.131.236.23:443</srv>
	<srv>200.2.126.98:443</srv>
	<srv>62.31.150.202:443</srv>
	<srv>90.69.224.122:443</srv>
	<srv>194.68.23.182:443</srv>
	<srv>182.253.210.130:449</srv>
	<srv>67.159.157.150:443</srv>
	<srv>172.117.118.98:443</srv>
	<srv>201.174.70.238:443</srv>
	<srv>138.34.32.74:443</srv>
	<srv>185.129.193.221:443</srv>
	<srv>187.163.215.32:443</srv>
	<srv>199.250.230.169:443</srv>
	<srv>95.213.199.95:443</srv>
	<srv>185.159.130.93:443</srv>
	<srv>185.231.154.104:443</srv>
	<srv>81.177.6.163:443</srv>
	<srv>185.159.130.87:443</srv>
	<srv>185.146.156.237:443</srv>
	<srv>95.213.203.174:443</srv>
</servs>
<autorun>
<module name="systeminfo" ctl="GetSystemInfo"/>
<module name="injectDll"/>
</autorun>
</mcconf>


<servconf>
<expir>N/A</expir>
<plugins>
	<psrv>95.213.236.210:447</psrv>
	<psrv>109.234.34.169:447</psrv>
	<psrv>81.177.6.163:447</psrv>
	<psrv>185.249.255.18:447</psrv>
	<psrv>185.231.154.74:447</psrv>
</plugins>
</servconf>