d130d3b38d1f55a36b93f197f2b07ee7b8c1da799484d93a1d20f18500fe1496

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 06:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-06_21a9b12a56e0ccae97edbe79aa597816_akira_glassworm_rusty-stealer.exe
Size 5.5MB
Sample260907-hha6jsfc78
SHA256 d130d3b38d1f55a36b93f197f2b07ee7b8c1da799484d93a1d20f18500fe1496
MD5 21a9b12a56e0ccae97edbe79aa597816
SHA1 8c2d3e95951b0d7c16444657d30c1a2bd3849b05
SHA512 7edd27af19b11646d4ca12fff9574386ec0196e2678c8e56502a361f38e98140d56d411d422cdf5c89923f5cd8a31805e0c61b4ce6c6994e186a6694b2d3924b
SSDEEP 98304:ZjblsFqoOFYQlOdda0WH8JvwvRhCYAvM:7sG/
TLSH
T160464C05BA6B94ACD15BC47483068A639E2170DF1B36BAFF018486783F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

persistence

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4808	BridgeAgent.exe
1972	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
4232	reg.exe
5988	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 4232	2040	2026-09-06_21a9b12a56e0ccae97edbe79aa597816_akira_glassworm_rusty-stealer.exe	89
PID 2040 wrote to memory of 4808	2040	2026-09-06_21a9b12a56e0ccae97edbe79aa597816_akira_glassworm_rusty-stealer.exe	91
PID 4808 wrote to memory of 5988	4808	BridgeAgent.exe	92
PID 4808 wrote to memory of 1972	4808	BridgeAgent.exe	94

C:\Users\Admin\AppData\Local\Temp\2026-09-06_21a9b12a56e0ccae97edbe79aa597816_akira_glassworm_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-06_21a9b12a56e0ccae97edbe79aa597816_akira_glassworm_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:4232
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4808
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:5988
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 4808
    3⤵
    - Executes dropped EXE
    PID:1972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 4918a06c352c48e268b8c4fb35d976e68b8e756e66b9507e1bfad1ec7ed59dad
MD5 ea39a53b9db0d617f45bff04942f417d
SHA1 4c7a49fdb5e3e664be4ac7851af12b9558ef1784
SHA512 abcb43fc16be718da31c893c36f0c4f7f234ded26a26e18a7430602962f118cc3dc8b158fc879654a502717bd0ec1e25a4b33b7a5da3cecfa5508a8f52633550
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePj:2oQiA296ltiLfMppFVWWCsdo
TLSH
T16B53DDDEFF197361CAE601B7E2C106312CBD1F5D474776C0BBE910E6A68B602543D85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 4268cb2fee030c261cf91fb5d485935bcb8c1579724495f746aedb154f09cfef
MD5 9a3d96d3c3b9711824f6c0fd0643e136
SHA1 955104b7e63c6500cc03460d9ab8ad361b08ac6b
SHA512 590ece5e4efcf5c00cbb489535d3225ec8d0cef39a2d353eabd48816fbfaf799a8a9ef8c88759870071317b63bfa763bcb8273a21f89a2fa7194792bff0e636f
SSDEEP 96:oUfVmVs4m0micmJLdqfDFsuMK4osnGfkAsHvRuZbcqsED:qubIPdXhfqfD
TLSH
T12881F49437BC94378C06421EEDAA7F8E99B4FA1C5B469F3473B3571D9189C0F58060E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 ac60235712c9908359ed95d7975a98b7dc08b93ef3ae8d5d08a256bcb60e716c
MD5 1b9b1160d9af763fbc62e3b50aa1f8cb
SHA1 ed7cb01dccc8c6eec9a321fd7c0f887f8ea50eb5
SHA512 9e0091da3109fdfe2bd2eb56dc6fe56eae8409580e2f7b4ae555e5fe9aae84796fced9ea5a1194261969afc5105291eed9e69a95cfa2f1cbe8522765127ce527
TLSH
T1CC318E502BF881760C0D422EA9AA7FCEC8F4B90CAF864F3473B7971E9189D0F69451D2
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 cf5801d463e8d914c007f47872a0ecf5fe242f44933b386714566dc2e191bc08
MD5 042ab31666af8b5f2345a65c51a68947
SHA1 5efdfd549cf1b6b1e017f02117cd4e58ce499c9a
SHA512 7c37758ce0477229f41d5f8f7b52ef05ea1f4cfe2247c79fe812c2ba4eaa3704eedfa290ab4beeb8161f5188a9e7ff32e24621a04771b5e9d9233f3d4cc17432
TLSH
T12F519B902BA855378C0A422EADAA7FCED9F0B90CAB469F7473B3570D91C9D0F5845092
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 e8fe71a88b80fd7ba801dcb4b072b6248480a496d1867044c188b71663da8a57
MD5 5c67fbde8960425f034be67c2d01a0a9
SHA1 a47081df7f1e28bf3034ba41f1457e0180f2a739
SHA512 99bddc9dbc5cebcde7fe34b0b44eb90622e0ce78b602902791e92db7e83c6509b0086e6f72bb8079eec98bc8c09e7aeef283f0ccab1695859f46851d2cff4a8b
TLSH
T19F1163502BF98527080E512FA9A67FCF84B5780CBF4A5F3073B68B1E519AD0F66451D2
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 9a89a220c9c526e2c9adc1390fccba0e747c6e9ac066020c2837acee3bac7cbc
MD5 7c3183cf9977bc4569dce26a213d09b1
SHA1 22ad146348c0749123c4a98cc9b208ba2a3cef19
SHA512 e2ad54fa993409d688b9dacd0c9f14f4ca1e02cfb2856b980b3b9d16c0e6b3cb9727d2de986c2392ddd97f7b6c8d27860747ced93b22a50cbe1a9700cd337b5e
TLSH
T1F8519C903BAC54378C0A422EADAA7F8E99F4BA0CAB479F7473B3571D91C9D0F5845092
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ca840c1d57b4996477743096c7f8193bc7045e77ad54d6ef35f88d1a10318da2
MD5 be130caa0029649e30045d5b4a91aa03
SHA1 d8497e15e9d3ba4c84dcd787454da819b7a9bc35
SHA512 617384bdef9c57f666b6eee783990dc4514f68157e8c54b75c6cff72f086d38f30f76984f6cf075263e4bace2fb3a3b485b4a74b84ea73d1b063bf90c270b0c0
TLSH
T152B01413D3574D7DD31D75F355543545C34DD10DDD5157157D14C400D155C15574700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 890ea534529eb6fe3ec996c1468d931a9aee0a3fda98215b3c953c67fae57acb
MD5 30c2c59827007df5616e154ed8ac9ddb
SHA1 fd1af7d2b2105dbd756d2635a6f4cd10f02503f3
SHA512 4ec253e35b4df590e7563b03820ce7ece24f2b24749d550343f0bd5be0a7a4ce87a3422109d9df9f719d076ca11274118cf2581f5ff7fbaa0a1ca20a3e6ea1fa
TLSH
T1A2B09203E76B89AD822DA6E221A42AC2C24EE41AAAA16A257918C444A05681A978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 fd5e4bc262409a71bf3b86e0fbcbcc53aacc652928e703edb6a401a07133b36f
MD5 e877d76299612c7183222d235563f699
SHA1 708873c2341b092660de6d7a2c7bdc2c896a0c09
SHA512 c093cf8d3ccc51d95163bebf0dd0789a26f84088430326fff5b2ba764b7cd3356c493e57945559d10ec4f95695618be73f89d5cdb0c93c0858fd94a664076fb2
TLSH
T1A2B09202E32A8A9C822C79E292A46B82C24EA00ACA5ADA156D09C450A4564299A8710D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9df5ad0bb70a7d1cdbd41c3143e127087b1184a02108d47db0dfc6f583d0f5a0
MD5 a041f37552859355f983b078d53f1174
SHA1 c9e687fe69fbc61a9e0e96e45de096bf4c9b85b7
SHA512 aee71d3bce145bb9e18458c4864e395bc61332b4236c171cd3a1b4f0916f936d2c2d1e1b560a1fcff1ad01ccefedfbdfcb9eb2da87b226992206494271ee4890
TLSH
T1C7B09B03D317499D825D65E111542641C34DD00A995156157D18C4009055815564740D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4d2e3363d5b302d59bf9d111cd82a47169473116322055e02e533143f5bef1d8
MD5 e0d612d4272819b86a2f0487317b5131
SHA1 8baebe233887ce9e450584bb4a453c44aad81538
SHA512 3e296dcfc91809a30e5fd848031fb499f635af9620269147c7bfb530a5c93ab34010c3f47ec309a2ab2f73bac53e6adcf267884b90c3ea475f022d3765399c74
TLSH
T1AAB09B03D317495D921D65E121542541C24DD00B995156157918C4009155815568700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ce6b3036b2650486d0ee54ca0452bc3afe1fbab16c4afb004382d51cafd680c4
MD5 a63c1eb99377d3412d178d06b483dc7d
SHA1 f7453b74469c5f19bf98eab49a99ca0d4a452956
SHA512 142f7ed078eb5b194c5899be77b00e229817759acda88c5f4a78c67dce40c6b1479abc325fde33cdff0e917287bcdad1074534bf9d828cc7c4d1e21517a6c618
TLSH
T157B09203E32B89AD822DB6F261A46A82C24EE00AA9A1AA157919C401D05A81A968B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 66a11282de683a49af5b3cd49f0132457d9a2b672dcb1b8b3cb8c30125c8f727
MD5 56891b66bc13d485e8d472cc86bb0dc1
SHA1 ed48635dd2b64960dca735fbebe3cdd2dc370d1a
SHA512 56d007adc9386a8290b6a2e844a344a691814d0e97caa94e71a1b8d8a9f4fc067b9102bc31125bcd705002d4a5c5d160439ee2fdb9a2181e16e1f3ba8403a365
TLSH
T15EB09203E36B89AD922D66E262A43A86C34EE00EA9A16A167D18C400915682A968B00E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f1d1fd2488b6d93e07de1596eee252696daa29b655733d6bffc955b55d499ce8
MD5 d765ca14f7956de3517af968cc1e1405
SHA1 26c8be56b42fbf55c0482d680050831747f14f66
SHA512 a0090ba06bcf04b4b1f45a68fc05b616d74b87e4e37ecb3c27c4d305930d013a399ba92c4d249582bb8397c48c942e350866e0dcff68a6b448afd2809c2b869d
TLSH
T115B01403D3574D5DC31D75F111543545C34DD01D7D5157157D14C401D055C17D74700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8595eeeb37f6ecb524f99eb35b9f30b001d4c47a48dc4beef616a2ab6d23e5dc
MD5 b061076da8c47d989e2f99a8c68aa2fa
SHA1 bda74fc9d0734de7c65164ac8e6cba6b8437db10
SHA512 9cb418db79c687b116bfdcca1ff05ea794f8c53ccc0bfab7d8afe2ae4fbc74d75e12a599b048e1a64887ff29c37a2ddb47d8f4d8acb3830d279ea5ce706f6d90
TLSH
T19AB01203F32B8DADD32DB6F261A47982C34EE00FADA57B157D18CC00D556C1A978B10D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7b9b10af6e3c7a22dbbbd13d599016f8fd0caa14d3e97f86c1c5c76761520505
MD5 6aa8ea1588fca834f837cf33df63580d
SHA1 0589eb54341ae037aa5e84b0bdf86e058662ec57
SHA512 0b4da734e9afe0807042d003e5a1923722ebc044286b98493792c6853a68201caa7d9356874994f056368579d9d02c8680d20b6ec96c2ab439bb1c282713fb9b
TLSH
T149B01403D3574D5DC35D77F111543541C34DD05DDD5157157D14C440D055C15D74700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2af6504421830e7d086c10db09a2e869c61b5cbcdd407b768f4053ae10a77ceb
MD5 310a975fdd22de304f32ad35f296cf80
SHA1 f6984b2a78d40aced675203800bf9c924d3aaf2d
SHA512 360b64a8ad57cc471263e41d15615fea9acf88fa44b88fd108b7efb5e5c0f5e5c22c8be8d3d521068d9c4d3d54c66b31f5acc3c78574015b6f4515e9a7a1d9ab
TLSH
T110B01203E32B8DEEC72D7AF221B53A82C34EE01EEDB16B167D18C400D056C2A978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 294adbc6aa72105a7d09212354b787c2d7077aa23480c9102e3e94dd867bb9f5
MD5 f5e43298c9b8954dc82ec6be3fa70992
SHA1 54394006ca168b6af3daa0f5d33c422595db29b3
SHA512 8a6f1e33951e073bb90306824ba4eaabbcd12eb7f62d42397eb9ffdf944e19ffa37c9dc1b57fad0e2568e66091b1e9902741ca2947e1a74ba853bc7532bbc29e
TLSH
T141B09203E32B8DAD822D66E221A42A82C68EE00EA9A1AA157918C400905691A969B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 31500217b56014b22eaf8e8ee52038f6a37b42d270c18c95b54dd7ec69349060
MD5 3c94a79a5a7c9304a67ba38623844b10
SHA1 dca60066144f646215350814527c23696c2fef8e
SHA512 96def3bdb0eea6876bc7d99ea34f32868f3e30548cb6a237f20edb12389a68c3a85fc675d72b060e525c82c959e3a6bef1038bee1de8a72ac2a3ac19081ead74
TLSH
T16AB01413D3574D5DC31D75F315543541C34FD00D5D5157157D14C400D055C15574740D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 255e425e21f8214d4badccbdbe1f01922e08fd231df53cca84bba240e689d27e
MD5 96d42c8907fb75a147105850b006555b
SHA1 523b16c6fcd7ecd653033319c6550b727cdeae3f
SHA512 a604da4002a72c55c7f120af886c112bbfb85f0492298ed0213406c611fe8dffc464b661684b56b044149e9141a0272dbd25c5113653579c0629746b8b7d2937
TLSH
T1CBB09B03D317496D821D65F111542581824ED109595156157914C4409156C15964740D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4aa23d456c75b47f85ec5cb7e813c7b458a48f7bf8e0ab50428cc0f71d21e3dd
MD5 e43a2b2bf9a1c601eaf374c5868a1b56
SHA1 4417e30d1575e2c9e24b349364ba7ffce81a8429
SHA512 ba6f8ad7c4de8aa81dd605fec0947c7636606286de432738a5bd518f9a525df94c4f8538a40360eeae06b35dcefc5eb07cd497fd71fbabb32da8bd0ef21032cb
TLSH
T1CBB09213E36B8DAD822D66E225A42A82C24EE00EA9A66A157D18C800905692A968B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 59c6e788ed97ecdea5451e0470975c30b8f68bde74587b55f75ede4df7674603
MD5 df55880161908e6e21b439b7c3c63ba6
SHA1 f2963e8fa0e91a3d3b538f7994574aceac3e6b2c
SHA512 4f9e478f3fc9d051149432460837508e3636c9a32c8a1a67bd69590758c0b538925d9e1a71e780e797d7de9a498b12fd53ca69b9ebb43a6fe0ee78fc5baa6acf
TLSH
T192B01203E32B8DADC32EF6F261A42A82C34FE00EADA17B157D28C410D55AC1A978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d5eaf84a2b0da21df482b6877bee28c12c01bbf102a808e94f2061909bbaab79
MD5 f262e79fe8b884579b286c69f9d17711
SHA1 a3bb847328de17eafffdc524652e74567f46af56
SHA512 1efbe6cf7d54e07cf341a9c268aac3b4537f8902263d299c44dc4cbc71b5323be2d01a37cc4d92af149bced3344d3818d24c569d880756a3f97b68013d155d4d
TLSH
T1D0B09203E36B89AD922E76E221A46A82C24EE00AA9A16A15BD19C400D05692A968B10E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 317bd1de74d0af87966980f993826a8767434d2c33e1e9793fe22b5233d388f4
MD5 6b1ffa0c89e6d045087b97c48c8acca8
SHA1 7327ebfa96e499f07ad6f14d1428db3f8af9e5f3
SHA512 805fcb427dde184465cab9b31baedafb80dd242ead033d379ca37e18632709de8cde06126fcaf89f14df28a12ef579d67f99c9f810c56aeafb3afcb600d82068
TLSH
T169B01403D3174D5DC31D75F111543541C34FF00D7D5157157D14C440D557C15574700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 724bcdd2b835f8b5009a9040667d5794281a9f6eab63840dc133c79ad19f004f
MD5 ccb2c3b52d1b2c685ee1d25f28afd370
SHA1 b277dd038250b7e7424085013f6a24a471b0d1d4
SHA512 a13e60e11c66b73224e11a91345f60e12b4848057173d5df27744db4400d52266c71ca4972c39fb5846074f56093463c64a483e5d02d3fd8cdf9e8786b3cc32e
TLSH
T193B01403D3174DDDD31D75F171543541C34DD00D5D5157157D14C400D155D1F574700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 24f22420b9f3f795f4932226423c1d3f55e22e4452517514d4c93501c55b029a
MD5 5fdfc23ea8e887ae89274f982112aa92
SHA1 69a7a67faa7128c0c6efda770b62156479f28586
SHA512 0bd41f81275b4819a400cbfc686571cb46d31b66b0ed9ca70f3ff55c3a619dba2a02591f883f4694261bdd6832278ef24180fa7fd0dc33740260a3c3fcc693b9
TLSH
T175B09B03D317495D921D65F151641541824DE00A696166157918C4009555915564700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2e816d6fbd3f5d551b9f3ab383ad9487a0c68ab95e15dc13e8875f4be9c8dafa
MD5 bea7a5405b87544b1c92afb42defb23b
SHA1 9e48bf8632fd36818e88371bc984bb59a4324952
SHA512 de468434da02cf9dce786f53e548b56754ea464b83682f69b39e23745bf8905bfbef6fb04628370e26ede134e6fbad8300cc8a59f93865eec7cf02a5cab31ef6
TLSH
T164B09203E72B89ADD22EA6F265A42A82824EE01AADA26A157D18C400925681A968B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fdd8f14a7b1a87f1f8ee48b6c0368321e366acf31556d494fe149718aecc46ee
MD5 a6d3e3309d905e260e21192dc00695ea
SHA1 29e690056364c3a127be166430cdb7385e6a6ece
SHA512 4ecef07cb7393aa4484c5487c227b9f48ec5d78538744b86f8629b28dca9490dc735dd9f7459f3b80c100675b99f8e97a4ca1bb5dfc8f0a0307524e57783405b
TLSH
T1E4B01403D3174D5DD31DF5F151541541C34DD00D5D5157157D14C510D155C15574710D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 85a2aed99e1f386e0f16c433d9f6999d5637a0b2710147e742915c66706ae41d
MD5 f362f7ae2db9dbe5d2e6741577ff3292
SHA1 e2612005658c39033b259da0cd65dc03eacf8ee6
SHA512 6da8c87e0daa22c125e1205221c5c46973f96bfef3e0626f47fac7e1195cc2d1bb5056ba846e47170a51172f6c03065799e65c944271bd208a9b2e02183e3979
TLSH
T137B01203E32B8DADC72DBAF261A43982C34FE00EBDA16B157E18C800D156C1B978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e186d9a3347b318c85bb71a14ff1ea70a1c853bc52df4187800891e4b8979496
MD5 a3a6db3a200d00c03fc236657950063b
SHA1 edbb4bbfe38810f12f129ccd11d2744cf57474d6
SHA512 52e115a877458ed8a9cb8ea135c2c2e33e3df03bfd9276d779dfa369a08a00e065c3bc12a3aa471021f94dd539e8e9ac94b8aa8f046a78ef89c7e962ba6e3f3b
TLSH
T1A6B01403D3174D5DD31D75F171541D41C34DD10F5D5357157D15C410D155D1557C700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a795e0d5a8be746de6e5399370ae4a697e2eb8a8f1ea98a1a58ab34ab3b9a04c
MD5 99882d357c0f44af610ff7e6df879dae
SHA1 b5e4b87ef3005aa9536832e937bb53db995e9555
SHA512 2d99ff410a7c6d046c450210fa58020fe79e2f241c0bf987853836094d8e97e427464890f6d8d2bdc711045e71d3455f28bb8f3450e0c420f0555113de069fae
TLSH
T142B09B03D717895DC21D65F151641541824ED119599566157914C400A255815568700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8527fc81c1b711ab54f306d5ea5957665c871ade2665106f35b0261a1a44f932
MD5 0fc9c5f21cef1913502a80b14c9b8f9e
SHA1 b7360c1e6c4b7dee3fdebc069a046e3ac293248d
SHA512 cb61aa6c230508f6318b92a5b748f20ed13aae6de1f3698099531f2d75daa0a2555fc1fe7a84cb3d7c99e051b02611ab5c3f05fc29dfe195ec72984efb4f06db
TLSH
T153B01203E32B8DADC32DBAF261A42982C34EE00EBDA16B157E18C810D156C1B978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 122745bf251c844c731c8bf05f7cdec8cb655cc01c965773e1bad407733b1e28
MD5 3c1684cba9022e9a3f84fa6e96e8785c
SHA1 dc33873e4a54cce20b18fb8ad3ab05e95cb24fcf
SHA512 cd40563d18bc3e1c2ff726d9152f903c68ba6d140125d763e7b32d75e89456d1fef6eaad8914e799526dcae9e01aeae1a0d1def6686c4cfe4832e06e74b114f4
TLSH
T13BB01203E32B8DADC32DB6F261A42982C74EE00EEEA16B157D18C400E156C1BAB8B10D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5e73a4a26cd716a4c79e9cf14fcfc3e414b2953cef5c46866c7aa0fd72e38fdc
MD5 5162adec75e7be5e4ea4faf4e3f894c4
SHA1 eecc24753b92ab736a420ca8e0a8ac1662412723
SHA512 3871e02aa6a42bb9a164f995b7d477772812f551082f47a6bdaec63c596e3a790929925e843ec841cff92fbd40cdfbc9c81d6fc0a36ffe813887118f86412f26
TLSH
T163B01243E36B8DADC32EB6F2A1B42982C34EE11EADA16B157D18C810E156C1A978B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 20fceab92d3c2537b8cd8602d4dff9e46e02a87e770419624e18ce9262df25fe
MD5 ffa0ac845b5cd1fb2167d3abc0fcffc2
SHA1 2343bd4e2dff33d9efede92ee41f47d2ab3258db
SHA512 3d373a057d492c51fb0afcdb4189497066faeab237c9788d80126235ef5efe25f3f9907c9c5103b5885cc7fa0f4d6c78216d99c507ca0cde05af5069e05d1ba3
TLSH
T14CB01403D3174D5DC31D75F151D41541C74DD00DDD5157157D14C410D157C15574740D
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 5.5MB
SHA256 d130d3b38d1f55a36b93f197f2b07ee7b8c1da799484d93a1d20f18500fe1496
MD5 21a9b12a56e0ccae97edbe79aa597816
SHA1 8c2d3e95951b0d7c16444657d30c1a2bd3849b05
SHA512 7edd27af19b11646d4ca12fff9574386ec0196e2678c8e56502a361f38e98140d56d411d422cdf5c89923f5cd8a31805e0c61b4ce6c6994e186a6694b2d3924b
SSDEEP 98304:ZjblsFqoOFYQlOdda0WH8JvwvRhCYAvM:7sG/
TLSH
T160464C05BA6B94ACD15BC47483068A639E2170DF1B36BAFF018486783F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads