Hancitor Oct 5

https://www.virustotal.com/file/3ab1f686ce7355bd4405e66aacb148cea198ceb26cd1c0b15b9ddd7c3d68a682/analysis/1507220501/
https://www.hybrid-analysis.com/sample/3ab1f686ce7355bd4405e66aacb148cea198ceb26cd1c0b15b9ddd7c3d68a682?environmentId=100
https://packettotal.com/cgi-bin/view-analysis.cgi?id=dc1afecad26c72be7619d25bfdbf8525

doc dl links:
http://all4insurance.com
http://satyawholesale.com
http://satyainstitute.net

hancitor c2:
http://talwilwasled.com/ls5/forum.php
http://wasidrinve.ru/ls5/forum.php
http://dapahedtsed.ru/ls5/forum.php

payload dl links:
http://vaultpit.com/wp-includes/1
http://vaultpit.com/wp-includes/2
http://vaultpit.com/wp-includes/3

evil-pony c2:
http://talwilwasled.com/d2/about.php
http://wasidrinve.ru/d2/about.php
http://dapahedtsed.ru/d2/about.php

pony c2:
http://talwilwasled.com/mlu/forum.php
http://wasidrinve.ru/mlu/forum.php
http://dapahedtsed.ru/mlu/forum.php

zloader c2:
http://beoftmala.com/bdl/gate.php
http://redjussandrit.com/bdl/gate.php

zloader rc4 key:
TyweJ848wWb7o0JfQMfY6pyd6YEp0pI2