Mekotio Banking Trojan Threatens Financial Systems in Latin America
===========================================================================================
[Detected as Trojan.PDF.MEKOTIO.A]

5e92f0fcddc1478d46914835f012137d7ee3c217
f68d3a25433888aa606e18f0717d693443fe9f5a
3fe5d098952796c0593881800975bcb09f1fe9ed

[Detected as TrojanSpy.Win32.MEKOTIO.B]

1087b318449d7184131f0f21a2810013b166bf37
ef22c6b4323a4557ad235f5bd80d995a6a15024a

[C&C servers]

 23[.]239[.]4[.]149:80
68[.]233[.]238[.]122:80
34[.]117[.]186[.]192:80
68[.]221[.]121[.]160:9095
68[.]221[.]121[.]160:80
tudoprafrente[.]org
tudoprafrente[.]co:7958

[ZIP/MSI Downloader]

hxxps://intimaciones[.]afip[.]gob[.]ar[.]kdental[.]cl/Documentos_Intimacion/
hxxps://techpowerup[.]net/cgefacturacl/descargafactmayo/eletricidad/
hxxps://christcrucifiedinternational[.]org/descargafactmayo/eletricidad/