Hancitor Sep 13

https://www.virustotal.com/file/1c72f575d0c9574afcfcaab7e0b89fe0083dbe8ac20c0132a978eb1f6be59641/analysis/1505315125/
https://www.threatcrowd.org/ip.php?ip=34.201.146.122
https://packettotal.com/cgi-bin/view-analysis.cgi?id=1abfe8e73aa62a8f70db9b8bfd1832c1

hancitor doc links:
http://cleanairacandheating.net/v.php?n=
http://comfortadvisorteams.com/v.php?n=
http://myinternetsweepstakes.com/v.php?n=
http://lsgsettlements.com/v.php?n=
http://ABCPROMOTIONS.NET/v.php?n=
http://morninbreakcafe.com/v.php?n=

hancitor c2:
http://cyfievengtont.com/ls5/forum.php
http://witcahinrab.ru/ls5/forum.php
http://dingletorsspar.ru/ls5/forum.php

dl links:
http://www.pennisonlawllc.com/wp-content/themes/twentysixteen/inc/1
http://www.pennisonlawllc.com/wp-content/themes/twentysixteen/inc/2
http://www.pennisonlawllc.com/wp-content/themes/twentysixteen/inc/3

pony c2:
http://cyfievengtont.com/mlu/forum.php

zloader c2:
http://botoldrithap.ru/bdl/gate.php
http://tonslysedding.ru/bdl/gate.php