Hancitor Oct 26

https://www.hybrid-analysis.com/sample/e4984fb2fb373ff4ceaf3f6cc40dbfdb092a03df8a58f123136761e821c0cc99?environmentId=100
https://packettotal.com/cgi-bin/view-analysis.cgi?id=2f55e32e78295df81fd9d733226cde18

additional details thanks to @cheapbyte:
https://pastebin.com/Wb2KJSmr

additional doc dl domains thanks to @ring0x0
bostonwrongfuldeathlaw[.]com
bostonproductliabilitylawblog[.]com
10stepstoyes[.]org
securedorderluinc[.]com
misterstreetsigns[.]com
consumerrightslawblog[.]com
tenstepstoyes[.]com

panda banker:
https://www.hybrid-analysis.com/sample/8646acb4bc76aa2221b3fd885305937710f90866f61139d08bee44d3b22902b8?environmentId=100

doc dl:
http://consumerrightslawyerblog.com/n.php?ilx223=
http://10-steps-to-yes.com/n.php?goh652=

hancitor c2:
http://notheccodidn.com/ls5/forum.php
http://renlomeand.ru/ls5/forum.php
http://rugoheset.ru/ls5/forum.php

payload dl links:
sanginpayeh.com/1
sanginpayeh.com/2
sanginpayeh.com/3

pony c2:
notheccodidn.com/mlu/forum.php

evil-pony c2:
notheccodidn.com/d2/about.php

panda banker c2:
tontrumuchtors.com