Files named abgus.com-ssl_log-Jan-2025.gz

mail.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jan-2025.gz

/New 1007/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 2936089fe40c55fb9ab8a3aeea1a23fca02c99b9
SHA256: c2b2b98bf60cdf03176b2fd71e4de3c14c1eb805f970c3318f8c9e4ace55e6d6
application/x-gzip
1.13MB
2025-01-31 12:08:14 +0000 UTC
www.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jan-2025.gz

/New 1007/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 2936089fe40c55fb9ab8a3aeea1a23fca02c99b9
SHA256: c2b2b98bf60cdf03176b2fd71e4de3c14c1eb805f970c3318f8c9e4ace55e6d6
application/x-gzip
1.13MB
2025-01-31 12:08:14 +0000 UTC
mail.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jan-2025.gz

/Latest Backup/TEST/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 2936089fe40c55fb9ab8a3aeea1a23fca02c99b9
SHA256: c2b2b98bf60cdf03176b2fd71e4de3c14c1eb805f970c3318f8c9e4ace55e6d6
application/x-gzip
1.13MB
2025-01-31 12:08:14 +0000 UTC
www.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jan-2025.gz

/Latest Backup/TEST/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 2936089fe40c55fb9ab8a3aeea1a23fca02c99b9
SHA256: c2b2b98bf60cdf03176b2fd71e4de3c14c1eb805f970c3318f8c9e4ace55e6d6
application/x-gzip
1.13MB
2025-01-31 12:08:14 +0000 UTC