Hancitor Jan 23

boatersland./biz
boatersland./mobi
boatersland./name
boatersland./us
boatersland./ws
sjkproducts./biz
boatsuppliesshop./com
electronics4boats./com
marineelectronicsshop./com
boatersland./info

additional dl
http://byket-konfet.ru/wp-includes/1
http://byket-konfet.ru/wp-includes/2
http://byket-konfet.ru/wp-includes/3
http://emmcreative.com/wp-includes/1
http://emmcreative.com/wp-includes/2
http://emmcreative.com/wp-includes/3
http://jennanddaniel.com/wp-content/plugins/contact-form-7/1
http://jennanddaniel.com/wp-content/plugins/contact-form-7/2
http://jennanddaniel.com/wp-content/plugins/contact-form-7/3
http://kosary.net/del/1
http://kosary.net/del/2
http://kosary.net/del/3
http://krazyfin.com/wp-includes/pomo/1
http://krazyfin.com/wp-includes/pomo/2
http://krazyfin.com/wp-includes/pomo/3

hashes
775b652695ff2669ad4241e901473f51934655104671faa6d8be9b32df4583f1  1.dll
6277d85014621f51047965a208744bf717f2176ceee8c83fa061ed941165633a  2.exe
d8e22774d0dcc693af1465150de8cc828953ab4d05682cd44695c1a9ec7830f7  3.exe
6b217a9d1a1bc1974b00a35bcce8b4bd282daf2053f819fff8fa048eaf7f6853  file.exe
56c788830f77316f6f5372446e8553ae28222e9d58c8343cd944f9ce7b4cb936  invoice_795252.xls

hancitor c2
http://migotdover.com/4/forum.php
http://tonthersthetleft.ru/4/forum.php
http://fetonswareb.ru/4/forum.php

pony c2
http://migotdover.com/mlu/forum.php
http://tonthersthetleft.ru/mlu/forum.php
http://fetonswareb.ru/mlu/forum.php

evilpony c2
http://migotdover.com/d2/about.php
http://tonthersthetleft.ru/d2/about.php
http://fetonswareb.ru/d2/about.php

gozi domains
g2.ex100p.at
ax.ikobut.at
beetfeetlife.bit
in.samnort.at