Hancitor Apr 5

doc run
https://app.any.run/tasks/0da200ab-842c-49a5-84e0-b9d8d96c80f9

pandabanker sample
https://www.hybrid-analysis.com/sample/6cefef0e50aea5c4d5c0f56911704090570b9b1dcdb4f234d5336c40311462b9

hancitor c2
http://wonyheghi.com/ls5/forum.php
http://tontwoverar.ru/ls5/forum.php
http://nofatiga.ru/ls5/forum.php

additional dl
http://powerdecal.ca/wp-content/plugins/exclude-pages/1
http://powerdecal.ca/wp-content/plugins/exclude-pages/2
http://powerdecal.ca/wp-content/plugins/exclude-pages/3
http://thewalshgroup.com/wp-content/plugins/iwp-client/1
http://thewalshgroup.com/wp-content/plugins/iwp-client/2
http://thewalshgroup.com/wp-content/plugins/iwp-client/3
http://toyocom.jp/wp/wp-content/plugins/siteorigin-panels/inc/1
http://toyocom.jp/wp/wp-content/plugins/siteorigin-panels/inc/2
http://toyocom.jp/wp/wp-content/plugins/siteorigin-panels/inc/3
http://ua-magistr.ru/wp-content/plugins/team-members/inc/1
http://ua-magistr.ru/wp-content/plugins/team-members/inc/2
http://ua-magistr.ru/wp-content/plugins/team-members/inc/3
http://usaloe.com/wp-content/plugins/home-categories/1
http://usaloe.com/wp-content/plugins/home-categories/2
http://usaloe.com/wp-content/plugins/home-categories/3

evilpony c2
http://wonyheghi.com/mlu/forum.php

pandabanker domain
oldsinedtdin.com

pandabanker link
https://oldsinedtdin.com/1ykagbeytyszuulofygvu.dat
https://oldsinedtdin.com/65webinjects.dat
https://oldsinedtdin.com/1ykagbeytyszuulofygvu.exe
https://oldsinedtdin.com/65webinject32.bin
https://oldsinedtdin.com/65grabber.bin