-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC
-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC
-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC
-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC
-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC
-
44.201.56.94 · access_log-20260215.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f55dae0fc5e69dfc45caaa05ae4140203590c0fe SHA256: 4c371ba46bcddc9aa029a10f9281602734079aa3885c2f2ae3138f95c4690e2c application/x-gzip 160.05KB
2026-02-14 23:57:04 +0000 UTC