Scan location:	/home/wallorte/doch.amz.recovery.wallor-tech.com
 
/home/wallorte/doch.amz.recovery.wallor-tech.com/v6NYE4wCfZK.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/TUehfIocvH5.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/Ch6pGiBKnk8.php: YARA.leafmailer.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/95EeHMRFBhd.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/A2ZGVJWjfqm.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/pki-validation/c/g/a/f/tzabqhwdmle.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/d/g/d/g/uqdgzlvbmra.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/h/h/d/g/nrovimldtyf.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/e/b/d/d/rhlkqsmwgjf.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/a/a/b/b/tjvdeqplwsr.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/vu6de8SikCy.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/ERZ1ByFGNcz.php: YARA.leafmailer.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/mdswbcuy.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/NUZ3WHKflDq.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/panel/wp-login.php: YARA._TryagFileManager3_shell_php_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/panel/upfile.php: YARA.infected_09_27_18_uploader.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/HgUXMriIxeV.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/MRtdIaJrSjf.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/d5mVBUjqXSh.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/yfANKO2EtJp.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/vwEW9f4Vxdy.php: YARA.leafmailer.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/BPzeZrEw2dj.php: YARA.leafmailer.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/index.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/doch.amz.recovery.wallor-tech.com/Lwu4PEjcdzs.php: YARA.leafmailer.UNOFFICIAL FOUND


 Scan location:	/home/wallorte/public_html
 
/home/wallorte/public_html/.well-known/acme-challenge/upload.php: {HEX}php.base64.inject.180.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/ttxkhvxs.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/checkbox.php: {HEX}php.base64.inject.181.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/aovxtqrn.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/utchiha2024.php: {HEX}php.base64.inject.181.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/pitnamrt.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/acme-challenge/mailer_utchiha.php: YARA.leafmailer.UNOFFICIAL FOUND
/home/wallorte/public_html/.well-known/wp-2019.php: YARA.WFYARAGEN_G4472_rules_1.UNOFFICIAL FOUND


Change timestamps on malicious files flagged in the scan

================================================================================

2023-08-08 05:14:06.777683272 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/v6NYE4wCfZK.php
2023-08-08 05:14:04.285624488 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/TUehfIocvH5.php
2023-06-06 00:00:58.758326773 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/Ch6pGiBKnk8.php
2023-08-08 05:14:01.631561884 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/95EeHMRFBhd.php
2023-09-21 12:06:51.769268306 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/A2ZGVJWjfqm.php
2023-06-18 23:54:47.514402425 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/pki-validation/c/g/a/f/tzabqhwdmle.php
2023-06-18 23:54:27.789937169 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/d/g/d/g/uqdgzlvbmra.php
2023-06-05 07:09:55.167405285 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/h/h/d/g/nrovimldtyf.php
2023-06-05 07:09:58.465483080 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/e/b/d/d/rhlkqsmwgjf.php
2023-06-05 07:09:28.583778235 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/well-known/acme-challenge/a/a/b/b/tjvdeqplwsr.php
2023-09-21 12:07:12.803764465 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/vu6de8SikCy.php
2023-05-29 15:02:17.292024244 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/ERZ1ByFGNcz.php
2023-08-08 05:14:05.771659541 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/mdswbcuy.php
2023-08-08 05:14:04.254623758 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/NUZ3WHKflDq.php
2023-05-29 15:06:26.527903175 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/panel/wp-login.php
2023-05-29 15:06:26.527903175 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/panel/upfile.php
2023-08-08 05:14:03.920615879 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/HgUXMriIxeV.php
2023-08-08 05:14:04.192622295 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/MRtdIaJrSjf.php
2023-08-08 05:14:04.948640127 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/d5mVBUjqXSh.php
2023-08-08 05:14:07.168692493 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/yfANKO2EtJp.php
2023-05-29 15:02:18.959063566 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/vwEW9f4Vxdy.php
2023-05-29 15:02:17.289024174 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/BPzeZrEw2dj.php
2023-09-21 12:06:52.906295126 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/index.php
2023-06-20 10:37:08.657490848 -0400,/home/wallorte/doch.amz.recovery.wallor-tech.com/Lwu4PEjcdzs.php
2023-05-29 15:43:48.132777733 -0400,/home/wallorte/public_html/.well-known/acme-challenge/upload.php
2023-11-16 23:01:34.651060132 -0500,/home/wallorte/public_html/.well-known/acme-challenge/ttxkhvxs.php
2023-12-10 17:41:44.973108322 -0500,/home/wallorte/public_html/.well-known/acme-challenge/checkbox.php
2023-12-01 01:02:39.040230791 -0500,/home/wallorte/public_html/.well-known/acme-challenge/aovxtqrn.php
2024-01-03 09:35:21.998436490 -0500,/home/wallorte/public_html/.well-known/acme-challenge/utchiha2024.php
2023-12-01 01:04:42.882151951 -0500,/home/wallorte/public_html/.well-known/acme-challenge/pitnamrt.php
2023-12-10 19:11:16.469810187 -0500,/home/wallorte/public_html/.well-known/acme-challenge/mailer_utchiha.php
2023-05-29 15:43:48.131777709 -0400,/home/wallorte/public_html/.well-known/wp-2019.php