-
44.201.56.94 · access_log-20260322.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9eeac5cf1f3cbf0fa5209e509457ac24d246639c SHA256: 4a2ea0f8dac708d9b6ab3110cd268ca36959542b60a911c6f10adbe85c17fb04 application/x-gzip 635.03KB
2026-03-21 23:48:42 +0000 UTC
-
44.201.56.94 · access_log-20260322.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9eeac5cf1f3cbf0fa5209e509457ac24d246639c SHA256: 4a2ea0f8dac708d9b6ab3110cd268ca36959542b60a911c6f10adbe85c17fb04 application/x-gzip 635.03KB
2026-03-21 23:48:42 +0000 UTC
-
44.201.56.94 · access_log-20260322.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9eeac5cf1f3cbf0fa5209e509457ac24d246639c SHA256: 4a2ea0f8dac708d9b6ab3110cd268ca36959542b60a911c6f10adbe85c17fb04 application/x-gzip 635.03KB
2026-03-21 23:48:42 +0000 UTC
-
44.201.56.94 · access_log-20260322.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 9eeac5cf1f3cbf0fa5209e509457ac24d246639c SHA256: 4a2ea0f8dac708d9b6ab3110cd268ca36959542b60a911c6f10adbe85c17fb04 application/x-gzip 635.03KB
2026-03-21 23:48:42 +0000 UTC