Hancitor Sep 19

https://www.virustotal.com/file/4ed0013525892bc6c93b1750a8a9a341911151458c936f5d893e9494e7443de7/analysis/1505832854/
https://packettotal.com/cgi-bin/view-analysis.cgi?id=38be05b4e99492ce2837c6653d2ebfcc
https://www.threatcrowd.org/ip.php?ip=34.224.84.94
https://www.threatcrowd.org/ip.php?ip=184.168.221.41

doc links
http://cfw1.com/s.php?n=
http://ccs-southeast.com/s.php?n=
http://MYHUDSON.ORG/s.php?n=
http://solo-aire.com/s.php?n=
http://mkrcontractingllc.com/s.php?n=
http://dogwithafoodblog.com/s.php?n=
http://delcocarpetandflooring.com/s.php?n=
http://bluemarlinventurecapital.com/s.php?n=

dl links:
http://lokashraya.com/wp-content/plugins/hit-counter-max/1
http://lokashraya.com/wp-content/plugins/hit-counter-max/2
http://lokashraya.com/wp-content/plugins/hit-counter-max/3

hancitor c2 links
http://ruthettitut.com/ls5/forum.php
http://hersharwasligh.ru/ls5/forum.php
http://leftrepinbu.ru/ls5/forum.php

pony c2
http://ruthettitut.com/mlu/forum.php
http://hersharwasligh.ru/mlu/forum.php
http://leftrepinbu.ru/mlu/forum.php

evilpony c2
http://ruthettitut.com/d2/about.php
http://hersharwasligh.ru/d2/about.php
http://leftrepinbu.ru/d2/about.php

zloader c2
http://jotedidhi.com/bdl/gate.php
http://sintalthenheg.com/bdl/gate.php