-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC
-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC
-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC
-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC
-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC
-
44.201.56.94 · access_log-20260118.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 7ef90d369908364fb8ac78cd5961a60d874c926c SHA256: 150c1f6e4e3af392e08401d632ce8a60b153261ac732d21e1d3bba220ce0b237 application/x-gzip 369.54KB
2026-01-17 23:59:44 +0000 UTC