Hancitor Dec 12

http://risekart.com/wp-content/tdenny.php

additional dl
http://xriots.org/562387_4353.php
http://aqua-sapone.ro/wp-content/themes/sketch/1
http://aqua-sapone.ro/wp-content/themes/sketch/2
http://dyc.cdncich.com/wp-content/themes/sketch/1
http://dyc.cdncich.com/wp-content/themes/sketch/2
http://jh-internacional.rs/wp-content/themes/sketch/1
http://jh-internacional.rs/wp-content/themes/sketch/2
http://parkourschool.ru/wp-content/themes/sketch/1
http://parkourschool.ru/wp-content/themes/sketch/2
http://www.jkui.top/wp-content/themes/sketch/1
http://www.jkui.top/wp-content/themes/sketch/2

hashes
92723de1d981995c628f42385a806643ab5acfc3340c9e58bc1d834c8a017113  1.dll
1f69619d787493378201fe8e75b5a7363ca0ecaea846ebc598bc8295083a80bf  2.exe
eaeb26c9387a73ce5dc06ed5496901739c9b5fd2a4e78976bd3656485733afce  3.exe
c90209651c24c6433123ce89a025b5ba3869f32fc048825ccfa287dd6f518143  aa.exe
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d  cekMAXTJiyQF.txt.dll
d9364b7116b8876b03983c7141a41e4b8bc63172d2b0c611c8e1eba9b0deae3e  IRATION_6184902314459.vbs

hancitor c2
http://vistiver.com/4/forum.php
http://thimemple.ru/4/forum.php
http://capandotd.ru/4/forum.php

pony c2
http://vistiver.com/mlu/forum.php
http://thimemple.ru/mlu/forum.php
http://capandotd.ru/mlu/forum.php

evilpony c2
http://vistiver.com/d2/about.php
http://thimemple.ru/d2/about.php
http://capandotd.ru/d2/about.php

ursnif info
ursnif
Dec  4 2019
550
2000
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
Gwe9HMygngWe8kPK
foo.fulldin.at/webstore
bat.fulldin.at/webstore
8.8.8.8
195.10.195.195
8.8.4.4
193.183.98.66
172.104.136.243
94.247.43.254

cobaltstrike c2
31.44.184.125