Reference: https://www.malware-traffic-analysis.net/2019/07/29/index.html MD5: 59d5b36a9feb1b932f2d6dc932c1fe13 Domains in Pushdo cfg: crcsi.org;t-tre.com;abart.pl;medisa.info;mobilnic.net;ora.ecnet.jp;credo.edu.pl;yoruksut.com;evcpa.com;jchysk.com;udesign.biz;jroy.net;h-f.net;stajum.com;valselit.com;mqs.com.br;xaicom.es;lrsuk.com;fe-bauer.de;snugpak.com;item-pr.com;vazir.se;netcr.com;ftchat.com;ottospm.com;jacomfg.com;nqks.com;waldi.pl;quadlock.com;domon.com;c9dd.com;reglera.com;naoi-a.com;dayvo.com;vexcom.com;pupi.cz;wkhk.net;pdqhomes.com;pcgrate.com;findbc.com;2print.com;ex-olive.com;yocinc.org;synetik.net;petsfan.com;baijaku.com;sjbs.org;11tochi.net;olras.com;maktraxx.com;pr-park.com;photo4b.com;ora-ito.com;com-sit.com;fink.com;medius.si;stnic.co.uk;tc17.com;tvtools.fi;cokocoko.com;rs-ag.com;abdg.com;transsib.com;tyrns.com;wifi4all.nl;pwd.org;elpro.si;usadig.com;x0c.com;fnsds.org;vitaindu.com;speelhal.net;pohlfood.com;ka-mo-me.com;nelipak.nl;koz1.net;kernsafe.com;wnsavoy.com;otena.com;sclover3.com;spanesi.com;cel-cpa.com;valdal.com;depalo.com;iamdirt.com;gpthink.com;edimart.hu;myropcb.com;jenco.co.uk;holleman.us;owsports.ca;alteor.cl;yumgiskor.kz;aevga.com;fcwcvt.org;railbook.net;fnw.us;hummer.hu;pb-games.com;nunomira.com;