Hancitor Sep 20

https://www.virustotal.com/file/5c583b552d4abc33090c077b3093071cd195e1f3a6bc6559c13e81cc1e0685b4/analysis/1505917656/
https://packettotal.com/cgi-bin/view-analysis.cgi?id=c3e43cb78b4c9b2f9eb21a3123e56ea6

doc dl links
http://BLUEBOTTLEBAR.COM/up.php?n=
http://bluebottlesaloon.com/up.php?n=
http://eastburnpublichouse.com/up.php?n=
http://KAROSCENE.COM/up.php?n=
http://pacificrimpizza.com/up.php?n=
http://PRECISIONDOORRIVERSIDE.COM/up.php?n=
http://precisiondoorriverside.net/up.php?n=
http://raindropbrewing.com/up.php?n=
http://tipplinghouse.com/up.php?n=

hancitor c2
http://dinyresi.com/ls5/forum.php
http://atnehartin.ru/ls5/forum.php
http://rowinwrondo.ru/ls5/forum.php

pony c2
http://dinyresi.com/mlu/forum.php
http://atnehartin.ru/mlu/forum.php
http://rowinwrondo.ru/mlu/forum.php

evilpony c2
http://dinyresi.com/d2/about.php
http://atnehartin.ru/d2/about.php
http://rowinwrondo.ru/d2/about.php

zloader c2
http://betidsoar.com/bdl/gate.php
http://haplingsohan.com/bdl/gate.php