-
44.201.56.94 · access_log-20260419.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: b0b848a2b2e8b56a68f0e812d4933dbdb104432f SHA256: fa06f554f8dfbba837b03841ffb944094228fd711a52ecdbff03645c2ce12a54 application/x-gzip 610.25KB
2026-04-18 23:58:36 +0000 UTC
-
44.201.56.94 · access_log-20260419.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: b0b848a2b2e8b56a68f0e812d4933dbdb104432f SHA256: fa06f554f8dfbba837b03841ffb944094228fd711a52ecdbff03645c2ce12a54 application/x-gzip 610.25KB
2026-04-18 23:58:36 +0000 UTC
-
44.201.56.94 · access_log-20260419.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: b0b848a2b2e8b56a68f0e812d4933dbdb104432f SHA256: fa06f554f8dfbba837b03841ffb944094228fd711a52ecdbff03645c2ce12a54 application/x-gzip 610.25KB
2026-04-18 23:58:36 +0000 UTC
-
44.201.56.94 · access_log-20260419.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: b0b848a2b2e8b56a68f0e812d4933dbdb104432f SHA256: fa06f554f8dfbba837b03841ffb944094228fd711a52ecdbff03645c2ce12a54 application/x-gzip 610.25KB
2026-04-18 23:58:36 +0000 UTC