Hancitor Jun 27

https://app.any.run/tasks/f966dc37-0d77-495b-a7fd-d0f8eca37e9c <- doc
https://app.any.run/tasks/e5c7fea7-90bc-4ae8-bc15-9d9c6264eff7 <- pandabanker

doc dl domain
http://resmacdirect.com

hancitor c2
http://titandughrab.com/4/forum.php
http://wigaruco.ru/borjomi/gate.php
http://zabiquzo.ru/borjomi/gate.php
http://titandughrab.com/borjomi/gate.php

additional dl links
http://cedarrunbaptistchurch.org/wp-content/plugins/display-posts-shortcode/1
http://cedarrunbaptistchurch.org/wp-content/plugins/display-posts-shortcode/2
http://cedarrunbaptistchurch.org/wp-content/plugins/display-posts-shortcode/3
http://christthedayspring.com/wp-content/plugins/audio-and-video-player/1
http://christthedayspring.com/wp-content/plugins/audio-and-video-player/2
http://christthedayspring.com/wp-content/plugins/audio-and-video-player/3
http://firstaidresearch.com/wp-content/plugins/ga-google-analytics/inc/1
http://firstaidresearch.com/wp-content/plugins/ga-google-analytics/inc/2
http://firstaidresearch.com/wp-content/plugins/ga-google-analytics/inc/3
http://prernachauhan.com/wp-content/plugins/video-embedder/1
http://prernachauhan.com/wp-content/plugins/video-embedder/2
http://prernachauhan.com/wp-content/plugins/video-embedder/3
http://rotoscoop.com/wp-content/plugins/falbum/1
http://rotoscoop.com/wp-content/plugins/falbum/2
http://rotoscoop.com/wp-content/plugins/falbum/3

pony c2
http://titandughrab.com/mlu/forum.php

pandabanker links
https://myaningmuchme.ru/Asv/5/-W4S7x1lXl0/zvef-o11/J/Q
https://myaningmuchme.ru/1waemgadyezabawhakavi.dat
https://myaningmuchme.ru/1waemgadyezabawhakavi.exe
https://myaningmuchme.ru/610webinject32.bin
https://myaningmuchme.ru/610grabber.bin
https://myaningmuchme.ru/610webinjects.dat
https://myaningmuchme.ru/610vnc32.bin
https://myaningmuchme.ru/610backsocks.bin
https://myaningmuchme.ru/610keylogger.bin