Hancitor Jul 3

http://mmmfrecklespbctw.com

hancitor c2
http://lingrewlighrat.com/4/forum.php
http://tititbutha.ru/4/forum.php
http://woherstinsof.ru/4/forum.php

additional dl thanks to @techhelplistcom
http://aerotransgroup.com.au/wp-content/plugins/breadcrumbs/1
http://fiveamwakeupcall.com.au/wp-content/plugins/growmap-anti-spambot-plugin/1
http://theluggagelady.com/wp-content/plugins/elegantbuilder/includes/1
http://5amers.com.au/wp-content/plugins/backupbuddy/lib/1
http://wingedspurproductions.com.au/wp-content/plugins/easy-paypal-lte/lib/1
http://aerotransgroup.com.au/wp-content/plugins/breadcrumbs/2
http://fiveamwakeupcall.com.au/wp-content/plugins/growmap-anti-spambot-plugin/2
http://theluggagelady.com/wp-content/plugins/elegantbuilder/includes/2
http://5amers.com.au/wp-content/plugins/backupbuddy/lib/2
http://wingedspurproductions.com.au/wp-content/plugins/easy-paypal-lte/lib/2
http://aerotransgroup.com.au/wp-content/plugins/breadcrumbs/3
http://fiveamwakeupcall.com.au/wp-content/plugins/growmap-anti-spambot-plugin/3
http://theluggagelady.com/wp-content/plugins/elegantbuilder/includes/3
http://5amers.com.au/wp-content/plugins/backupbuddy/lib/3
http://wingedspurproductions.com.au/wp-content/plugins/easy-paypal-lte/lib/3

pandabanker domain
myaningmuchme.ru
https://myaningmuchme.ru/1waemgadyezabawhakavi.dat
https://myaningmuchme.ru/1waemgadyezabawhakavi.exe
https://myaningmuchme.ru/610webinject32.bin
https://myaningmuchme.ru/610vnc64.bin
https://myaningmuchme.ru/610backsocks.bin
https://myaningmuchme.ru/610vnc32.bin
https://myaningmuchme.ru/610webinjects.dat
https://myaningmuchme.ru/610keylogger.bin
https://myaningmuchme.ru/610grabber.bin
https://myaningmuchme.ru/610webinject64.bin