Files named abgus.com-ssl_log-Jun-2025.gz

mail.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jun-2025.gz

/New 1007/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 46364d96c1facbb2abb989e7814a228533b703f2
SHA256: e62ef178cff889a2a43c40e97804e1dde67421e0c00b0f6ffa53e73612a6f172
application/x-gzip
797.90KB
2025-06-30 12:05:18 +0000 UTC
www.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jun-2025.gz

/New 1007/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 46364d96c1facbb2abb989e7814a228533b703f2
SHA256: e62ef178cff889a2a43c40e97804e1dde67421e0c00b0f6ffa53e73612a6f172
application/x-gzip
797.90KB
2025-06-30 12:05:18 +0000 UTC
mail.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jun-2025.gz

/Latest Backup/TEST/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 46364d96c1facbb2abb989e7814a228533b703f2
SHA256: e62ef178cff889a2a43c40e97804e1dde67421e0c00b0f6ffa53e73612a6f172
application/x-gzip
797.90KB
2025-06-30 12:05:18 +0000 UTC
www.vps128096.inmotionhosting.com · abgus.com-ssl_log-Jun-2025.gz

/Latest Backup/TEST/homedir/logs/

United States · IMH-IAD

Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 46364d96c1facbb2abb989e7814a228533b703f2
SHA256: e62ef178cff889a2a43c40e97804e1dde67421e0c00b0f6ffa53e73612a6f172
application/x-gzip
797.90KB
2025-06-30 12:05:18 +0000 UTC