home

sstldom1-635814576928787249.rdp

MD5:
bcb36552d60ecc21c72400adea242ef3

SHA-1:
b0c54d417fadce53b8338ccc68a3534bcb579011

SHA-256:
6e589b2a081d7834ce2e970baffa36126ec9da26e9b64d6105c0ff38aba0136f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:38:41 PM UTC  (today)

File size:
1.1 KB (1,094 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\sstldom1-635814576928787249.rdp

The file sstldom1-635814576928787249.rdp has been seen being distributed by the following URL.

https://passwordsafe.mountsinai.org/eEye.RetinaCS.Server/api/.../StartRemoteSessionAdmin?protocol=rdp&ipaddress=10.61.21.25&username=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&password=2ee081b466d1aa2c5f491f2c214bd9ab1a7afa9e23698f078d37f62a6fdf915bcbaec2ab36398b49bc6e13579bc913fb8bb6098a5ea3e881492dadfe0c154e6d85682ec512cc77e786747e98903efe1132d5eeeeeb3f4aa325e4c97eeb099252ed3042120051df357da222510fd341feac53e1336de93fbb4a61b6df34509126e5d87a87cac1542f69de965d6cbbd8fe1ffea8f2745e25b71af67a5439fb4a8df47610330a5b505fdcf52d523

Scan sstldom1-635814576928787249.rdp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.