Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 12:30

General

  • Target
    f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe
  • Size 5.8MB
  • Sample260816-ppntjsdc54
  • SHA256 f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Modifies registry key 1 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe
    "C:\Users\Admin\AppData\Local\Temp\f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:6004
    • C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      2⤵
      • Adds Run key to start application
      • Modifies registry key
      PID:3904
    • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
      "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:5380
      • C:\Windows\system32\reg.exe
        "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:4484
      • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
        "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 5380
        3⤵
        • Executes dropped EXE
        PID:5096

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        agent.db

        • Path C:\Users\Admin\AppData\Local\Bridge\agent.db
        • Size 60KB
        • SHA256 438dc69dbf234f325b0f27fd7aff0597a65a1f94479f0898ccf085f5870d3194
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 4KB
        • SHA256 391ce14bce3846bc4b9de2a77cb0b87dd808a5a2e41a08cc18fdf1e94557e3dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 1KB
        • SHA256 114e323ad5d56c55d4eb397b0fd93d577e8d42b621f4b133c5028940743cb73f
        • MD5 SHA1 SHA512 TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 1KB
        • SHA256 8c283c8ee425f3bf8f485eb25b737c1a480d4f3079ed19f276f06e0366ccb227
        • MD5 SHA1 SHA512 TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 2KB
        • SHA256 5156a493457d5abd4a6ab8505b4a274ee96f315d533b200443a4aed774f69b43
        • MD5 SHA1 SHA512 TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 2KB
        • SHA256 5d111cbd1289553a73da43240b221ab993c912609e29680d28c8ca3fa74098e8
        • MD5 SHA1 SHA512 TLSH

        bridge-agent.log

        • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
        • Size 3KB
        • SHA256 171dfcd29ded21943ed08aae2fa42d511650fe48295b6bc41b8df0bf29a57241
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 804a17d223a982c06f128268b71a4a0abb9af3585aaf65bb555b09b081ddfd0f
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 117B
        • SHA256 5258b132aa59b2036068709d9a13bc835dcb799057509cd77021b67889a184f9
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 a69ca15c304bc958132a158b5f2357b24793d0a6d7d49bfb72a8350cfa905336
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 95bf20c989460802fbc2b72f64f29626b95ea1061c9f6e6e5b99edde7a448a41
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 a887276f2e2ee82035c2199c39a5e7e704d7f3cb4ed089572081d8c0e05e3141
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 b3150bb93f14f5bee3a3c6f9d0fbf3d11b7fa05a0f16e5848bdb5ebfb219e054
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 a569c63b3bd67bb04939f593a40ca1c7d6390bed0cb16892b4c1d7bf8af52c73
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 ccc94f6e2a4253976470191d26926efbb80d783e3a4c03eca3ca9f4f9769b98c
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 8cbba46e17b07b8d9e58a26eee10228f210991bf8156aaae7c268eef5fd9c048
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 ea7cd20cf526f06265e1ca45ce64c47378137bf6bc0bd6470a91e15c0d37df24
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 e722df874fe5779b790ecb3e1cba5959a3a17052f2d102382af05a4bf4eddf33
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 883bbd8c7a676721c9d84cbe85ab0dcd51a5f8a7b96aa1b50a69fbcc6815e857
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 9a712d236f4ce89d3715278e45cee00773edb0322d8c7ad66ebce485f9b2d94c
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 abf911448733207777ca338832fce190daa216bfc33f1c2e73413ce6d6513bd5
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 9a9cb418f23095bc76b87363e043a4582f6524b7b5b82f2a14bc6cd2fe9b0dfa
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 955e14f9cfd2e027c0151d6489f8c634f43e84290b16319378faeedae3283c2e
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 e8fc3469cc17f2f1ad4fcbbf7967651ba9dff20d6fba83adba2b108fbef05e9c
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 606e96eb51ef242e1ab67f9d71ce366b1bfd82620e2be705a6b4d2fa693074e1
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 be4abc6f20869c5653930f5b1bca256d7b0e9f73b82d969db106d98f639b7999
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 c4e541a099f5b48c76cfd1540da93348462b7d9f20cf52c0f14219964b036030
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 e5dd787cb600ac821876020a66ff1dbdae080a2bea0aa4f2e1d93d7e566cd05f
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 eefc7dda904577ae6da94a24b44baeca0076a284fbd2816964947d7908d75fe9
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 b3840727fd3edad1e7a0998fd55852d9d295804d68c129121edabdfa4d38a5ee
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 694324972f868d8816c3bfaecc8b250b9377ba50f27b41521e46175e307c8e0e
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 46db9b1feab51604f6b86c29eeceb0c4ca5bb38fa5d6e168bcef64153504d60e
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 7ece89f0a307af2134d88d86bacef65008c3ab3d26eec1824c85de15fe16e39e
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 269fd6de16d69318f66589acc0b76fa2435235b67a4b6c47483553f5f0805d2f
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 39724fdd3c040ea5049f6aa3ef165dcef0bf0e5dd9c0f52a77815c20e1687f9d
        • MD5 SHA1 SHA512 TLSH

        supervisor.heartbeat.json

        • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
        • Size 123B
        • SHA256 eb91894e71d34727724d1a1c1e0dec9f9132faf6712771332b169ef10563af6b
        • MD5 SHA1 SHA512 TLSH

        BridgeAgent.exe

        • Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
        • Size 5.8MB
        • SHA256 f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d
        • MD5 SHA1 SHA512 SSDEEP TLSH