-
44.201.56.94 · access_log-20260315.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 477fab609da2151cb8da73dcff1344d31ce83173 SHA256: 2c0ad562c24d5c850301eab2d4f065b87af66a0c96f5e07448d11a940a7ce94b application/x-gzip 363.10KB
2026-03-14 23:55:26 +0000 UTC
-
44.201.56.94 · access_log-20260315.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 477fab609da2151cb8da73dcff1344d31ce83173 SHA256: 2c0ad562c24d5c850301eab2d4f065b87af66a0c96f5e07448d11a940a7ce94b application/x-gzip 363.10KB
2026-03-14 23:55:26 +0000 UTC
-
44.201.56.94 · access_log-20260315.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 477fab609da2151cb8da73dcff1344d31ce83173 SHA256: 2c0ad562c24d5c850301eab2d4f065b87af66a0c96f5e07448d11a940a7ce94b application/x-gzip 363.10KB
2026-03-14 23:55:26 +0000 UTC
-
44.201.56.94 · access_log-20260315.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 477fab609da2151cb8da73dcff1344d31ce83173 SHA256: 2c0ad562c24d5c850301eab2d4f065b87af66a0c96f5e07448d11a940a7ce94b application/x-gzip 363.10KB
2026-03-14 23:55:26 +0000 UTC
-
44.201.56.94 · access_log-20260315.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 477fab609da2151cb8da73dcff1344d31ce83173 SHA256: 2c0ad562c24d5c850301eab2d4f065b87af66a0c96f5e07448d11a940a7ce94b application/x-gzip 363.10KB
2026-03-14 23:55:26 +0000 UTC