-
44.201.56.94 · access_log-20260426.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: e55e107ec720073c7b40c3ca2820781cc58e8ac2 SHA256: 62ff068a842efb57207d0dd1fefb6c95dd85f6347f7ebe1671fd960df9a9c383 application/x-gzip 102.83KB
2026-04-25 23:59:00 +0000 UTC
-
44.201.56.94 · access_log-20260426.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: e55e107ec720073c7b40c3ca2820781cc58e8ac2 SHA256: 62ff068a842efb57207d0dd1fefb6c95dd85f6347f7ebe1671fd960df9a9c383 application/x-gzip 102.83KB
2026-04-25 23:59:00 +0000 UTC
-
44.201.56.94 · access_log-20260426.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: e55e107ec720073c7b40c3ca2820781cc58e8ac2 SHA256: 62ff068a842efb57207d0dd1fefb6c95dd85f6347f7ebe1671fd960df9a9c383 application/x-gzip 102.83KB
2026-04-25 23:59:00 +0000 UTC
-
44.201.56.94 · access_log-20260426.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: e55e107ec720073c7b40c3ca2820781cc58e8ac2 SHA256: 62ff068a842efb57207d0dd1fefb6c95dd85f6347f7ebe1671fd960df9a9c383 application/x-gzip 102.83KB
2026-04-25 23:59:00 +0000 UTC