Hancitor Sep 11

https://www.virustotal.com/file/0fac83312aaca0ae14fffd0bd125f48d2b72a51638e0b5e5ee24a98ede7312c9/analysis/1505144620/
https://packettotal.com/cgi-bin/view-analysis.cgi?id=7a3a316e22eea2a8348a9570aac47352
https://www.threatcrowd.org/ip.php?ip=54.191.2.231

doc dl links
http://n5qw.com/ups.php?n=
http://theshiftcollection.com/ups.php?n=
http://nitschtool.org/ups.php?n=
http://7wer0.com/ups.php?n=
http://9v56.com/ups.php?n=
http://ain0.com/ups.php?n=
http://bn0c.com/ups.php?n=
http://m45x2.com/ups.php?n=
http://matre.info/ups.php?n=
http://nitschtool.info/ups.php?n=
http://nitschtool.net/ups.php?n=

hancitor c2:
http://ughherveter.com/ls5/forum.php
http://ratredpelac.ru/ls5/forum.php
http://laclittsparon.ru/ls5/forum.php

dl
http://website1.nl/1
http://website1.nl/2
http://website1.nl/3

zloader c2:
http://botoldrithap.ru/bdl/gate.php
http://tonslysedding.ru/bdl/gate.php