TrickBot masrv Module
released on 2021-02-02 @ 05:05:48 PM
Recently Kryptos Logic discovered a relatively new module that goes by the name masrv. "The module is a network scanner that incorporates the Masscan open-source tool. Additionally, the module contains an unreferenced Anchor C2 communication function and a list of hardcoded IPs which have previously been associated with Anchor and Bazar. We believe this module is used as one of TrickBot’s network reconnaissance tools to gather more information about the victim’s network."