Hancitor Dec 13

https://www.hybrid-analysis.com/sample/4a2e03b591495b6ad0ec6442e483857625e866b27c6f71117d0a06fe79e072c3?environmentId=100

doc dl
http://youthworksindy.org
http://leapindy.org
http://indycareerhubcarrier.net
http://employup.net

hancitor c2
http://cilysitma.com/ls5/forum.php
http://hersandsinref.ru/ls5/forum.php
http://inleftwronhes.ru/ls5/forum.php

additional dl links
http://ancerapastanesi.com.tr/wp-content/plugins/posts-in-sidebar/1
http://ancerapastanesi.com.tr/wp-content/plugins/posts-in-sidebar/2
http://ancerapastanesi.com.tr/wp-content/plugins/posts-in-sidebar/3
http://doudoukids.com/wp-content/plugins/wp-super-cache/1
http://doudoukids.com/wp-content/plugins/wp-super-cache/2
http://doudoukids.com/wp-content/plugins/wp-super-cache/3
http://swiss-medical-int.ch/system/1
http://swiss-medical-int.ch/system/2
http://swiss-medical-int.ch/system/3
http://swiss-vision.com/includes/1
http://swiss-vision.com/includes/2
http://swiss-vision.com/includes/3
http://www.tridenttechnolabs.com/wp-content/plugins/waving-portfolio/1
http://www.tridenttechnolabs.com/wp-content/plugins/waving-portfolio/2
http://www.tridenttechnolabs.com/wp-content/plugins/waving-portfolio/3

pony c2
cilysitma.com/mlu/forum.php

evil pony c2
cilysitma.com/d2/about.php

icedid c2
arcadyflyff.com
binncu.net
cupicratings.com
freegameshacks.net
gordondeen.net