-
44.201.56.94 · access_log-20260412.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 13a6c8fd09b514ea7c751a832afd960b9f3eeeb9 SHA256: e059b8f2072e3bdd30babd37ddc2291989a655558cff4b1cb815aaefb9518474 application/x-gzip 72.92KB
2026-04-11 23:56:57 +0000 UTC
-
44.201.56.94 · access_log-20260412.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 13a6c8fd09b514ea7c751a832afd960b9f3eeeb9 SHA256: e059b8f2072e3bdd30babd37ddc2291989a655558cff4b1cb815aaefb9518474 application/x-gzip 72.92KB
2026-04-11 23:56:57 +0000 UTC
-
44.201.56.94 · access_log-20260412.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 13a6c8fd09b514ea7c751a832afd960b9f3eeeb9 SHA256: e059b8f2072e3bdd30babd37ddc2291989a655558cff4b1cb815aaefb9518474 application/x-gzip 72.92KB
2026-04-11 23:56:57 +0000 UTC
-
44.201.56.94 · access_log-20260412.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 13a6c8fd09b514ea7c751a832afd960b9f3eeeb9 SHA256: e059b8f2072e3bdd30babd37ddc2291989a655558cff4b1cb815aaefb9518474 application/x-gzip 72.92KB
2026-04-11 23:56:57 +0000 UTC