MALDOC DISTRIBUTION URLS
http://classroom-earth.org
http://classroomearth.com
http://classroomearth.org
http://earthchangingmoment.net
http://earthchangingmoment.org
http://earthchanginmoment.com
http://eechalkboard.org
http://learn4theplanet.com
http://learn4theplanet.net
http://learnfortheplanet.com
http://planetconnect.org

MALDOC FILE HASHES
557668edc67a19927deca19b1d9a393f

HANCITOR C2
http://sandverrolve.com/4/forum.php
http://gotrefsehan.ru/4/forum.php
http://enheswithto.ru/4/forum.php

PONY / EVILPONY / URSNIF PAYLOAD
http://argentarium.pl/wp-content/themes/argentarium2/1
http://argentarium.pl/wp-content/themes/argentarium2/2
http://argentarium.pl/wp-content/themes/argentarium2/3
http://collectsocialsecuritydisability.com/wp-content/themes/twentyfifteen/1
http://collectsocialsecuritydisability.com/wp-content/themes/twentyfifteen/2
http://collectsocialsecuritydisability.com/wp-content/themes/twentyfifteen/3
http://marylandshortsaleprogram.com/wp-content/plugins/contact-form-7/includes/1
http://marylandshortsaleprogram.com/wp-content/plugins/contact-form-7/includes/2
http://marylandshortsaleprogram.com/wp-content/plugins/contact-form-7/includes/3
http://waterwood.eu/wp-admin/includes/1
http://waterwood.eu/wp-admin/includes/2
http://waterwood.eu/wp-admin/includes/3
http://wp-john.com/wp-content/plugins/front-end-editor/1
http://wp-john.com/wp-content/plugins/front-end-editor/2
http://wp-john.com/wp-content/plugins/front-end-editor/3

PONY C2
http://sandverrolve.com/mlu/forum.php
http://gotrefsehan.ru/mlu/forum.php
http://enheswithto.ru/mlu/forum.php

EVILPONY C2
http://sandverrolve.com/d2/about.php
http://gotrefsehan.ru/d2/about.php
http://enheswithto.ru/d2/about.php

URSNIF C2
api2.doter.at
asx.zaronif.at
beetfeetlife.bit
extra.avareg.cn
foo.avaregio.at
g2.ex100p.at
gif.doter.at
in.extermas.at