Hancitor Apr 2

hancitor domains thanks to @mesa_matt and @wwp96
chaibuckz.com
unlaca.net
cognitionclassroom.com
mcnconstruction.net
sewardsfollybarandgrill.net
propertiesfirst.com
unlaca.org
intecwi.org
unlaca.info
fastandup.co.in

http://ivanajankovic.com/blog/inv.exe

additional dl
http://dokucenter.optitime.de/wp-content/plugins/auto-more-tag/1
http://dokucenter.optitime.de/wp-content/plugins/auto-more-tag/2
http://dokucenter.optitime.de/wp-content/plugins/auto-more-tag/3
http://jointings.org/eng/wp-content/plugins/featurific-for-wordpress/1
http://jointings.org/eng/wp-content/plugins/featurific-for-wordpress/2
http://jointings.org/eng/wp-content/plugins/featurific-for-wordpress/3
http://kitcross.ca/wp-content/plugins/autoptimize/1
http://kitcross.ca/wp-content/plugins/autoptimize/2
http://kitcross.ca/wp-content/plugins/autoptimize/3
http://shawneklassen.com/wp-content/plugins/foobox-image-lightbox/1
http://shawneklassen.com/wp-content/plugins/foobox-image-lightbox/2
http://shawneklassen.com/wp-content/plugins/foobox-image-lightbox/3
http://www.laxmigroup1986.com/wp-content/plugins/easy-responsive-tabs/1
http://www.laxmigroup1986.com/wp-content/plugins/easy-responsive-tabs/2
http://www.laxmigroup1986.com/wp-content/plugins/easy-responsive-tabs/3

hashes
8d17adadf99f919918459512510c9be4b4d7051554194361b7e7c27e320e5c95  1.dll
45d058305ef29037df0cf2c708c7eb41a19a567ddc8918c7a6ab9abfc75ee3ad  2.exe
2cccdc51aea02049dc7f96f510a13311f112096a7d870a97d70232356ddef42b  3.exe
468200d4d207a7cc1df245b9670fcf9e3c491dd344643cd7edcf8a82f2cde214  inv.exe
07a99580b94a4854a7e49ef38d03f070350baab088130b23d79dde29242eb346  invoice_173908.doc

hancitor c2
http://etsofevenghen.com/4/forum.php
http://hincasupheck.ru//4/forum.php
http://seromratbo.ru/4/forum.php

pony c2
http://etsofevenghen.com/mlu/forum.php
http://hincasupheck.ru/mlu/forum.php
http://seromratbo.ru/mlu/forum.php

evilpony c2
http://etsofevenghen.com/mlu/d2/about.php
http://hincasupheck.ru//d2/about.php
http://seromratbo.ru/d2/about.php

gozi info
2000
Gwe9HMygngWe8kPK
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
Gwe9HMygngWe8kPK
beetfeetlife.bit/webstore
api.sorna.at/webstore
supp.rivier.at/webstore
193.183.98.66
91.217.137.37
192.71.245.208
178.17.170.179
82.196.9.45
151.80.222.79
68.183.70.217
217.144.135.7
158.69.160.164
207.148.83.241
5.189.170.196
217.144.132.148
94.247.43.254
188.165.200.156
159.89.249.249
150.249.149.222