From VT: A length of 5-14, a-z. tlds: ['cc', 'cx', 'mp', 'museum', 'nu', 'ph', 'pw', 'tk', 'tv', 'ws']

MD5 896d8c518470635f058139ece63b34b1
Domains: bsxhrdaqpadhw.ph cavsftjttyegx.ph cebsdnm.ph clswrmzviuhy.tv crzhpdbeovb.mp dlkhzl.ph dsuzm.tv ekyisucvkdu.nu fpcaekbpy.nu gopprodymo.ph hbngloeusaaud.tk hdnthoafgeun.cc hqikqw.ws hxmwhn.pw jhbzeenwufvm.tk jyhvkibuije.tv ktsrw.ws lpelywltlfk.pw nckqhrmyqseh.ws nkllesg.ph nnlkogw.pw nwkeqbbw.museum ooecuz.ws pdkfbxedem.tv pvgsxfcrapzbke.ph quozsund.mp rfbpfcvbzwh.mp rpoeq.nu rpvthjjwtakt.nu rybeuvrbhy.mp rzafwgompiei.ph toxnaimlaql.mp uojdyg.mp uwcfsbubbn.pw vkczrtmvgyy.tv vmpqla.pw wgttayutl.tk wwdnnznktvbyc.cx xcbpsxh.mp xcptikslxtv.tv xeoaxmdg.cc xqfuwcxsssgwaq.ph ycusmgky.cx zajxq.nu
Today, try to run the file in Cuckoo and VirtualBox again, but only one different domain was generated each time

360netlab / DGA