home

srasadmp017001.msnyuhealth.org-635814803224940649.rdp

MD5:
4a437a4da3a84ca9a8c64c9c072ba3af

SHA-1:
a6465029dd422b080f1935a2ddb71c38e5aaf384

SHA-256:
ae7932556a8113fd8065adca10b97b6a6a6f5d6f3e84312658b64e5ddb8f496a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:48:40 PM UTC  (today)

File size:
1.1 KB (1,094 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\srasadmp017001.msnyuhealth.org-635814803224940649.rdp

The file srasadmp017001.msnyuhealth.org-635814803224940649.rdp has been seen being distributed by the following URL.

https://passwordsafe.mountsinai.org/eEye.RetinaCS.Server/api/.../StartRemoteSessionAdmin?protocol=rdp&ipaddress=10.81.231.31&username=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&password=c0af0599da337637fd3c78f22ae2bc5e05b27efa7a04a1e344c4641a4618e2961695a7e7d27470be100eb89156428d8de8e4a0e78ffb243a433ca6dc6aa8ef681116d740adad6b83f3f3f5797cd65001e897619ec0b59904651e55c9c85e8ac678f1ddb202570ffb4a7a4ab8521ec1a5236fe91506e55d03fdd705a5c98450110d9e70ed90d302e26660ded37c51baa7ea1ea9367ee3f7ff66b6229bbe92adffbf37366df318cbd7b482f483

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.