Main object- "PO-KM77119281.exe"
	sha256	cfce478df63fcfa1e598ed245b6b4ad73d0f6604ff51c50f4313295ee3f56a03
	sha1	c763842c6e774ad5b8db84e58e817e726daa4ef4
	md5	45a7948cd5c09e72f3e584b28be4573a
Dropped executable file
	sha256	C:\Users\admin\AppData\Local\Temp\Sorpdft\8prdhuxzllp.exe	f766ff58db725196d07857c0d73c86632db436dc8d352dfdca8b266025102b21
DNS requests
	domain	www.oyas999.com
	domain	www.ecocityremodeling.com
	domain	www.ausactives.com
	domain	www.emilienaturaldecor.com
	domain	www.viduaps.com
	domain	www.liuhe127.com
	domain	www.hosu.info
	domain	www.cheeksnsneaks.com
	domain	www.mallaljalloh.com
	domain	www.px-photo.com
	domain	www.tamedreality.com
	domain	www.weatherwilmingtonnc.com
	domain	www.3dduang.com
	domain	www.intellasoft.biz
	domain	www.nobuhotelsladowntown.com
	domain	www.workandstudy.online
Connections
	ip	202.124.241.178
	ip	199.192.16.165
	ip	192.0.78.24
	ip	45.15.124.138
	ip	104.28.30.33
	ip	3.13.31.214
	ip	50.63.202.49
	ip	50.63.202.55
	ip	35.242.251.130
HTTP/HTTPS requests
	url	http://www.viduaps.com/k9m/?LnJL=r4CiVlMBSRTIpUjx00OOX1P6PMrtzFusFdow+dMLhO87xgbr4FF6LbxTtW9ro0whFNrgyw==&jPh8=KnJHvh
	url	http://www.emilienaturaldecor.com/k9m/?LnJL=vMJs1N/nHLSY2tx6cn6Q80ET44n62Q4j9ll9RR0rt4ZRJY1DlUXDI0wYYK4n12hrFgUNew==&jPh8=KnJHvh
	url	http://www.viduaps.com/k9m/
	url	http://www.ausactives.com/k9m/
	url	http://www.ausactives.com/k9m/?LnJL=yYU7L7YtcbtdiQ2mvDYZBTdHTqK2vli2skTAiW0fdIhTPiDwXOktltsrzXp5a5z3DT0p0A==&jPh8=KnJHvh
	url	http://www.liuhe127.com/k9m/
	url	http://www.liuhe127.com/k9m/?LnJL=IUkuLRPXA5Jd9y/AAysKKZ6Nd7kMMihpQhRkfOVB29WE2EISAUsg/9ealbdrMfuAldZhsg==&jPh8=KnJHvh
	url	http://www.viduaps.com/k9m/?LnJL=r4CiVlMBSRTIpUjx00OOX1P6PMrtzFusFdow+dMLhO87xgbr4FF6LbxTtW9ro0whFNrgyw==&jPh8=KnJHvh&sql=1
	url	http://www.mallaljalloh.com/k9m/
	url	http://www.nobuhotelsladowntown.com/k9m/?LnJL=6zDJxnAX/3vXh0CENVLEsPDTfJdRst7LIe42m7KtLMynqbS3JMkr0ZDnx115JKLcSNj36g==&jPh8=KnJHvh
	url	http://www.intellasoft.biz/k9m/
	url	http://www.nobuhotelsladowntown.com/k9m/
	url	http://www.mallaljalloh.com/k9m/?LnJL=0P7qfS3G3vdJmyJ1hYN2g06n/xsSDeFqsgCW36frVsdSeSaqi4oQgDz3mvJhUGWB65iX/A==&jPh8=KnJHvh
	url	http://www.cheeksnsneaks.com/k9m/
	url	http://www.px-photo.com/k9m/
	url	http://www.cheeksnsneaks.com/k9m/?LnJL=xvyRCDsqkVOOOlO6b4+HUtJb2uWSl+k/57oNm21Y+rfzF8Ah9dffBLV78fG6B/U5ibjAlw==&jPh8=KnJHvh
	url	http://www.px-photo.com/k9m/?LnJL=UHSn5cDPoy+r/Uepovn6SNWjlsperRqeRM0py5Hh/egfA/+zRRfjOOnDs0BiaE6By4RoQw==&jPh8=KnJHvh