Hancitor Sep 26

https://www.virustotal.com/file/8217c97d7c305c4bb07ad6696121330c4283846c5aa261a5e456f557c8b0e78c/analysis/1506439256/
https://packettotal.com/cgi-bin/view-analysis.cgi?id=07c54b7a33d7478289bb06023cf70e1b

dl links:
http://DOCKREPAIR.COM/print.php?euv=
http://sandiegodockanddoor.com/print.php?kiv=
http://losangelesconveyor.com/print.php?plm=

hancitor c2:
http://rinhedtterfo.com/ls5/forum.php
http://tatoftfortwa.ru/ls5/forum.php
http://robrofrestoft.ru/ls5/forum.php

pony c2:
http://rinhedtterfo.com/mlu/forum.php
http://tatoftfortwa.ru/mlu/forum.php
http://robrofrestoft.ru/mlu/forum.php

evilpony c2:
http://rinhedtterfo.com/d2/about.php
http://tatoftfortwa.ru/d2/about.php
http://robrofrestoft.ru/d2/about.php

zloader c2:
http://thetcotonthers.com/bdl/gate.php
http://toftsitfisu.com/bdl/gate.php