Hancitor Dec 7

New Fax Message from <digits>
https://www.hybrid-analysis.com/sample/7016cfd45c9da598cb3d882896327653d7dad1f68d5188238ee6f74dc962daa3?environmentId=100

doc dl links
http://realityroyalty.com?
http://queenofvirtue.com?
http://hshprincessleith.com?
http://billionairebuzzkill.com?

hancitor c2
http://hentonsinsit.com/ls5/forum.php
http://kinhelelac.ru/ls5/forum.php
http://wronredhesme.ru/ls5/forum.php

additional dl links
http://manchafactory.com/76b.exe
http://dochoiminhdung.com/wp-content/plugins/simple-links/1
http://dochoiminhdung.com/wp-content/plugins/simple-links/2
http://dochoiminhdung.com/wp-content/plugins/simple-links/3
http://www.kurrywalah.com/1
http://www.kurrywalah.com/2
http://www.kurrywalah.com/3
http://nanosch.nl/wp-content/plugins/free-counter/1
http://nanosch.nl/wp-content/plugins/free-counter/2
http://nanosch.nl/wp-content/plugins/free-counter/3
http://noroadnoproblem.com/wp-content/plugins/gd-star-rating/options/1
http://noroadnoproblem.com/wp-content/plugins/gd-star-rating/options/2
http://noroadnoproblem.com/wp-content/plugins/gd-star-rating/options/3
http://website1.nl/1
http://website1.nl/2
http://website1.nl/3

pony c2
http://hentonsinsit.com/mlu/forum.php
http://kinhelelac.ru/mlu/forum.php
http://wronredhesme.ru/mlu/forum.php

evilpony c2
http://hentonsinsit.com/d2/about.php
http://kinhelelac.ru/d2/about.php
http://wronredhesme.ru/d2/about.php

icedid c2
mephistore.com
excelano.net
florenceb.net
intattorney.com
lcwut.com