-
44.201.56.94 · access_log-20260329.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 94cb5f9806024b5a71431c2aeb2a8c40e2611671 SHA256: dd343a09c1832b91e84d428dd678b2afeae66588cac715a87e2834dc613a3aa9 application/x-gzip 132.42KB
2026-03-28 23:52:55 +0000 UTC
-
44.201.56.94 · access_log-20260329.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 94cb5f9806024b5a71431c2aeb2a8c40e2611671 SHA256: dd343a09c1832b91e84d428dd678b2afeae66588cac715a87e2834dc613a3aa9 application/x-gzip 132.42KB
2026-03-28 23:52:55 +0000 UTC
-
44.201.56.94 · access_log-20260329.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 94cb5f9806024b5a71431c2aeb2a8c40e2611671 SHA256: dd343a09c1832b91e84d428dd678b2afeae66588cac715a87e2834dc613a3aa9 application/x-gzip 132.42KB
2026-03-28 23:52:55 +0000 UTC
-
44.201.56.94 · access_log-20260329.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 94cb5f9806024b5a71431c2aeb2a8c40e2611671 SHA256: dd343a09c1832b91e84d428dd678b2afeae66588cac715a87e2834dc613a3aa9 application/x-gzip 132.42KB
2026-03-28 23:52:55 +0000 UTC