Hancitor Apr 4

Thanks to @mesa_matt for the below domains:
alldogspoop.co
alldogspoop.org
alldogspoop.biz
alldogspoop.info
alldogspoop.mobi
alldogspoop.net
cherryhillpooperscoopers.com
pooperscooperfranchise.com
shopalldogspoop.com

additional dl
http://automotivedreamteam.com/v.exe
http://ecsn.biz/includes/domit/1
http://ecsn.biz/includes/domit/2
http://ecsn.biz/includes/domit/3
http://inazel.es/modules/1
http://inazel.es/modules/2
http://inazel.es/modules/3
http://nal.com.ua/components/com_registration/1
http://nal.com.ua/components/com_registration/2
http://nal.com.ua/components/com_registration/3
http://orik.hu/mambots/editors/1
http://orik.hu/mambots/editors/2
http://orik.hu/mambots/editors/3
http://scanelectric.ro/wp-content/plugins/thememove-core/1
http://scanelectric.ro/wp-content/plugins/thememove-core/2
http://scanelectric.ro/wp-content/plugins/thememove-core/3
http://syrtaki-santorini.gr/modules/1
http://syrtaki-santorini.gr/modules/2
http://syrtaki-santorini.gr/modules/3

hashes
671b416bfb21522d6ba30b05d8fc04732c8737a5ca35fa531563175fb0815395  1.dll
8189564580b804ed65d51990a109ac59bc88fd77518ab415363b5bbd8adc3aa2  2.exe
06fcfb449aa241fdd05cf0e1b04d0c111005cabf53e0ac40cf04dcb9a7d71c94  3.exe
ec3bee6428b6fa258a8c8bdf5c76a8a47662e8373d43b20870282e1df8423a7e  invoice_653780.doc
d3fad6911b80be1d64eb88ba23fecbcddc2faa73017b6dbcf78578eff47552ed  v.exe

hancitor c2
http://duloperes.com/4/forum.php
http://reflyhepone.ru/4/forum.php
http://gogotwitof.ru/4/forum.php

pony c2
http://duloperes.com/mlu/forum.php
http://reflyhepone.ru/mlu/forum.php
http://gogotwitof.ru/mlu/forum.php

evilpony c2
http://duloperes.com/d2/about.php
http://reflyhepone.ru/d2/about.php
http://gogotwitof.ru/d2/about.php

ursnif info
2.17.072
Mar 14 2019
2000
Gwe9HMygngWe8kPK
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
Gwe9HMygngWe8kPK

c2
beetfeetlife.bit/webstore
api.sorna.at/webstore
supp.rivier.at/webstore

dns servers
193.183.98.66
91.217.137.37
192.71.245.208
8.8.8.8
178.17.170.179
82.196.9.45
151.80.222.79
68.183.70.217
217.144.135.7
158.69.160.164
207.148.83.241
5.189.170.196
217.144.132.148
94.247.43.254
188.165.200.156
159.89.249.249
150.249.149.222