home

sstldom1-635814616190872912.rdp

MD5:
fa9e7f5abd1e23b719e24483fc8568e1

SHA-1:
7b74636031dd8768090773e70f41d3ebde8c0b29

SHA-256:
9fc868059549f20a11f5529ffa8837f3d5498262d7edfa16ae4019af72265379

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:23:22 PM UTC  (today)

File size:
1.1 KB (1,094 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\sstldom1-635814616190872912.rdp

The file sstldom1-635814616190872912.rdp has been seen being distributed by the following URL.

https://passwordsafe.mountsinai.org/eEye.RetinaCS.Server/api/.../StartRemoteSessionAdmin?protocol=rdp&ipaddress=10.61.21.25&username=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&password=1c44e799811867db2dc6d5eaefc496e27bb031e115a8c816ddf969ec8a58bd627ee76cd7c9c23f150ab18bc05a5dbfb02563d9dded6ae94bb765da9bb7a3d7b0bebecd71ccff9732ee0952dce8e402c44cc458d0bf12ed23dcec0a9731c400be8c7a353d1ced22a1b10c802cb816b0fed574665d521362e152c49f0a5783c7712259719d42373c39490f529d962053f50997d715c2f96dc3cffec9d5bed510337c4947b707718f2dc64a32b0f

Scan sstldom1-635814616190872912.rdp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.