Hancitor Jun 28

OnlineInvoices
http://itzzs[.]biz

https://app.any.run/tasks/cb0d93d6-e59e-46c0-9f73-729a10948e5d <- pandabanker

hancitor c2
http://recandritlo.com/4/forum.php
http://wroninbenot.ru/4/forum.php
http://sinthatmiling.ru/4/forum.php

from @techhelplistcom: https://beta.virusbay.io/question/browse/5b350f738c00956471f094f3
http://beforeafterdaycare.com/wp-content/plugins/custom-link-widget/1
http://beforeafterdaycare.com/wp-content/plugins/custom-link-widget/2
http://beforeafterdaycare.com/wp-content/plugins/custom-link-widget/3
http://investmentpropertiesfla.com/wp-content/plugins/irobotstxt-seo/1
http://investmentpropertiesfla.com/wp-content/plugins/irobotstxt-seo/2
http://investmentpropertiesfla.com/wp-content/plugins/irobotstxt-seo/3
http://kampotpepper.no/wp-content/plugins/pmc-disable-comments/1
http://kampotpepper.no/wp-content/plugins/pmc-disable-comments/2
http://kampotpepper.no/wp-content/plugins/pmc-disable-comments/3
http://sewlab.net/wp-content/plugins/google-sitemap-generator/1
http://sewlab.net/wp-content/plugins/google-sitemap-generator/2
http://sewlab.net/wp-content/plugins/google-sitemap-generator/3
http://stopmo.com.au/wp-content/plugins/option-tree/includes/1
http://stopmo.com.au/wp-content/plugins/option-tree/includes/2
http://stopmo.com.au/wp-content/plugins/option-tree/includes/3

pandabanker links
https://myaningmuchme.ru/
https://myaningmuchme.ru/1waemgadyezabawhakavi.dat
https://myaningmuchme.ru/1waemgadyezabawhakavi.exe
https://myaningmuchme.ru/610webinjects.dat
https://myaningmuchme.ru/610webinject32.bin
https://myaningmuchme.ru/610grabber.bin
https://myaningmuchme.ru/610vnc32.bin
https://myaningmuchme.ru/610backsocks.bin
https://myaningmuchme.ru/610keylogger.bin