-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC
-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC
-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC
-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC
-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC
-
44.201.56.94 · access_log-20260201.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 8e0dbdfea0eaeb1e7a14aad7031a5dd92d63586c SHA256: d4626b1c5639200c60160eccdcb48f4a13c1358c0ef40719ab0ed064263dde94 application/x-gzip 136.81KB
2026-01-31 23:40:09 +0000 UTC