Hancitor Sep 18

https://www.virustotal.com/en/file/f2dbdb12feb70f883e567a53d38c58081289134676c5f7ec09fefb031c559230/analysis/1505746154/
https://www.threatcrowd.org/ip.php?ip=54.209.195.193

links
http://huntsvilleairductcleaning.com/i.php?n=
http://mustardseedboutiquenash.com/i.php?n=
http://123care.info/i.php?n=

hancitor c2
http://hatgutifi.com/ls5/forum.php
http://ardoofse.ru/ls5/forum.php
http://sogotthein.ru/ls5/forum.php

dl links
http://cepd.info/wp-content/plugins/perth-portfolio/1
http://cepd.info/wp-content/plugins/perth-portfolio/2
http://cepd.info/wp-content/plugins/perth-portfolio/3

zloader c2's
http://deandveri.com/bdl/gate.php