Hancitor Dec 5

https://app.any.run/tasks/009359e8-00d4-4994-a382-f71c76d10465

doc dl
http://copiuslife.info?id=
http://eco-artscriteria.org?id=
http://copiuslife.org?id=

hancitor c2
http://utunsitta.com/ls5/forum.php
http://etmoatbe.ru/ls5/forum.php
http://lysinwronfo.ru/ls5/forum.php

payload dl
charli-salon.hr/wp-admin/includes/1
charli-salon.hr/wp-admin/includes/2
charli-salon.hr/wp-admin/includes/3

pony c2
http://utunsitta.com/mlu/forum.php

evilpony c2
http://utunsitta.com/d2/forum.php

pandabanker dl
https://sedhahenthet.com/1amfeuzwiixzayvlenouc.dat
https://sedhahenthet.com/1amfeuzwiixzayvlenouc.exe
https://sedhahenthet.com/webinjects.dat
https://sedhahenthet.com/webinject32.bin
https://sedhahenthet.com/webinject64.bin
https://sedhahenthet.com/grabber.bin
https://sedhahenthet.com/vnc32.bin
https://sedhahenthet.com/vnc64.bin
https://sedhahenthet.com/backsocks.bin
https://sedhahenthet.com/keylogger.bin
https://sedhahenthet.com/webinjects_1new.dat