Hancitor Nov 21

https://www.hybrid-analysis.com/sample/5d3651d7ee057156eabf329b198a46c19a51212ed034cc649a2edb6f3822ef13?environmentId=100

doc dl links
http://globalretailconcepts.com?EyoX1HWoQ0ul5W=
http://swatfootwear.com?3U0W2s0niCYdOWa05k=
http://usroute66popcorn.com/?wuRZ8Y4v3Qi63=
http://511footwear.com/?yKA4Ar1I47E3zy0=

hancitor c2
http://fortroledin.com/ls5/forum.php
http://himsedtione.ru/ls5/forum.php
http://rednawithrew.ru/ls5/forum.php

additional payload links
kbentertainmentanddesign.com/wp-content/plugins/easyrotator-for-wordpress/1
kbentertainmentanddesign.com/wp-content/plugins/easyrotator-for-wordpress/2
kbentertainmentanddesign.com/wp-content/plugins/easyrotator-for-wordpress/3
below thanks to @cheapbyte
http://artifexbygg.se/wp-content/plugins/easyrotator-for-wordpress/2
http://ecriator.com.br/wp-content/plugins/easyrotator-for-wordpress/2
http://www.copertunity.nl/ctom/wp-content/plugins/redirection/2
below thanks to @maciekkotowicz
https://ghostbin.com/paste/t5gex

pony c2
fortroledin.com/mlu/forum.php