-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC
-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC
-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC
-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC
-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC
-
44.201.56.94 · access_log-20260111.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 435352910f5b44a041e820e9ec97250e15fb8429 SHA256: 6f8be7a9f40d2180ec0712640978d94fccf3e02759917f8cd631617d9d9a8719 application/x-gzip 540.09KB
2026-01-10 23:58:23 +0000 UTC