-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC
-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC
-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC
-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC
-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC
-
44.201.56.94 · access_log-20251214.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9410d39e921c13fad9d64427155df875822acfbd SHA256: 5a4c5c93ef5a593ced7563fa5788879145ebf1656f83f1811b1105e6a687148d application/x-gzip 731.73KB
2025-12-13 23:55:36 +0000 UTC