hancitor 04-04-18

#sample (provided by @JAMES_INTHE_BOX)
hxxps://app.any.run/tasks/8ca562e8-2532-40fb-946d-2de1a5b05c4e

#Doc download domains:
silvercolloidal.co
dfwrealestateexchange.com
arcpercussivewelder.com
arcpercussivewelding.com
austinrealestateexchange.com
silverwater.co
colloidsforlife.co
mokenahearingcenter.net
joliethearingcenter.net
tilvera.com

#payload dl links (Provided by @JAMES_INTHE_BOX):
hxxp://risparmiato.com/wp-content/plugins/really-simple-captcha/2
hxxp://siteslikecraigslist.com/wp-content/plugins/w3-total-cache/2
hxxp://animalhealthcenterinc.com/wp-content/plugins/post-expirator/2
hxxp://risparmiato.com/wp-content/plugins/really-simple-captcha/3
hxxp://siteslikecraigslist.com/wp-content/plugins/w3-total-cache/3
hxxp://animalhealthcenterinc.com/wp-content/plugins/post-expirator/3

#c2 checkin
hxxp://onkesandre.com/ls5/forum.php
hxxp://ledrighlittleft.ru/ls5/forum.php
hxxp://torscimeled.ru/ls5/forum.php