bridgeagent | d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 18:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file_ea7a051a82d4b3b5.exe
Size 6.4MB
Sample260916-w5bbqacd44
SHA256 d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e
MD5 ea7aeeebfda6f39a868a6ba491695737
SHA1 01adc9b0769c2bcd81bac32d23ff9776c1a3eab4
SHA512 a233e07859d60c35c7831790547c913585dba9dcf9f82b965f3c9081f0e792f9af925e669ccdeb5b689f7f18df569f20c21e97285d4c17aa594f66692e499664
SSDEEP 98304:/HL3d0WMOPQ2p+COJx5C/YDX6XC7nKj54:7vBOoy
TLSH
T193663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

2.27.168.45

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000d00000001c500-19.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
4664	BridgeAgent.exe
2840	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
4688	reg.exe
612	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3156 wrote to memory of 4688	3156	file_ea7a051a82d4b3b5.exe	87
PID 3156 wrote to memory of 4664	3156	file_ea7a051a82d4b3b5.exe	89
PID 4664 wrote to memory of 612	4664	BridgeAgent.exe	90
PID 4664 wrote to memory of 2840	4664	BridgeAgent.exe	92

C:\Users\Admin\AppData\Local\Temp\file_ea7a051a82d4b3b5.exe
"C:\Users\Admin\AppData\Local\Temp\file_ea7a051a82d4b3b5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3156
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:4688
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4664
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:612
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 4664
    3⤵
    - Executes dropped EXE
    PID:2840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 06454fa0d40238b2f3157ec5ed05bbc2e0de9993fa9c6036093dfd2151e7fa61
MD5 10e1a804dd385b64d5927988a16a943d
SHA1 a1cd289af534b7b0204700c02302b869dcb0e451
SHA512 4b17744a054ed970e72da594e773bb42c4e292d09a842594348d6e1318dae113d24bded346c160dac3104109e461dc2762cde6cedc8979a2eb17229498cdd725
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePr:2oQiA296ltiLfMppFVWWCsd
TLSH
T14953CCDEFF197361CAEA01B7E2C106312CBD1F5D4747B6C0BBE910E6A68B602543D85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 da6bfa7b80a2168b3dcebc39be64685d48b77f91af459a798341176b85f5bdf9
MD5 f328b6259e32ee160bb004b6ea851cfe
SHA1 030df1e9806d6ff426d6230255b7ebd564fd3c67
SHA512 b3f28eb151d46d3154f2ab3365a8168482ec0da06bf5d51ddeec2ec65d8cbbb7fecd37797d2ced764950ded6a8752e9a57d864e5f5a9664979f90b0a84c3c19b
SSDEEP 96:oTTe0jsm03Wlc00LfZTXcEsAR+NTtPsJlRLRNY4qvAu:+gpSU2fARLqD
TLSH
T1B781ABA432F880B768C24217D46D8F8EB767B23DBB8AEF00B7659558F245C5C78C6721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 c638c0bde4976caf25bcc7049a304760483db4165bb326b96b545a839a52302d
MD5 b0574488129fc33c663d56e6557c48ef
SHA1 2223fecb1a9d4a35666b7e72d97d915ec6cbd185
SHA512 5226892c5fad3c1ecc726c792be752c5f6d4e562a0b1a76391b6c8f20f3526c0a355c7f8b349139b66b8201ed9e475e35a8e622f5ffeebd278178472911def2d
TLSH
T140313A2021F842BA18C29267A53E9F8DE272B62D7B8EDF11E3669258F501D0DBCC7751
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 307599ad27e3348e81317b31b9d1ab9a7f4273f29d1478038e16b02c22c15f34
MD5 46c5119525550b3d91af9e837002cba4
SHA1 94a99da4ed7bc4ee6d129d552adcb6fc3b32ec1d
SHA512 1ddbc5d224f60f66fd31f71ec03ac96a8f98f9f749f33e4109e804d7f6d2d988fb17fa6a32bf0475c1152efe4af2f8bdc90b797cf1857fef9f1d24de139f13e9
TLSH
T130416B6021F841BB58C29267A52E9FCEA373B62D7B8EEF10A3629114F141D0CBCC7315
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 950B
SHA256 917fe4478571c638daadeb67e9b0e0fc91e4a33b6b22f34c3c207083c2e6f704
MD5 ed26c4918f2e1909d6c5f763f590719d
SHA1 2c1e662a3c6cf208db5494c4d4312529238314bf
SHA512 6956dc25e1a3962beb5d4d2dced36d205c9ad743ebe984fb1291ea5b947d1496ed020ce1c1a4527343d129b65c18771ea259923bddf9a8e5e4d576419373f7c7
TLSH
T17411572011E942BA18C2A277953EDF8D9272BA1C7FCEEF00E3628458A511D0CBCCB761
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 1c8e1bd919535b0697b2aa0a45d39aac0e35767f96fefc015bdff5fbebf8ce1d
MD5 fc4de1ef8bb7b7664d6c87bf0b3aa959
SHA1 cdb653f4342c714bcfbaac39ce720c9d6a737153
SHA512 472342d275b14165294f28705dab853a4d121e54c6d56bf3f284a13d23c68b1a34875923a4a8cd9b1e18d70270ae2e0af6ea11e80e7fe6be3f248dba3e5c80cc
TLSH
T14051596021F881BB68C29227E52E8F8EB373B22D7B8ADF10A7669158F101D5C78C7315
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 ccc172ff63f195f1d9c40e94b55a1d9d3573ae9ae772ca2685f121942bdf9e52
MD5 f43ccd23eee98ed613ca457a2a2ce2cc
SHA1 1aad6c4e42711ce36b19ef51b550ffb730ac2dc1
SHA512 055348d19193f9cda674a169ce7ba842b1d5831790c46f443bb5dbf4b01d8c56281ea7ca50781303385c4b85091e86f8a694cbb26c6357c43b16bc59b9f8bfab
TLSH
T16E617A6431F881B768C25257E56D8F8EB373B22DBB8AEF00A7659158F105C5C78C7325
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a522e50310c8967d3e8a89a87f1a576ff882ef7fb5c2ec1831a91e0702d8a4c5
MD5 608f2fe761c50646c7eb2a3b7ac9d8ab
SHA1 367c9c3a6d423bd73303692624f9cf6752b38b72
SHA512 25315e86372d682ad27a1fbc8da942d65923ea9cf449210ac295e2b9c459bf3e6aa8cfc87111bfd80c7f536401db7dfe9840598ad0f22704b5ed304e6deb8a56
TLSH
T105B01401D35F4DD5441C17D351F57557C55D445DDDD7571D7574CD00D45751D414340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fd842eb7e5ba1ec97019e34ec9b6dca7bfe556a299b831496bc5313bb772f273
MD5 a650502d5c2d2d2de2a6e71e01661444
SHA1 1f9cc605462ee3a42fa8918155e00bcd9c17b7f0
SHA512 f2f24f8de3e064cf23bb5921ae22df8e45c18176b0dbf0ff51774508ee46bc5ba5eb09522d890ff087221721ba3e469c97909e42a7073788cc89ca16575673b1
TLSH
T10AB09202E26E49AA882826D352FA2A62869E446DA9A75B1975B4CA00E166A29818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9c0653d44e4c8bb4650b902d67c40bd968dcc61996ec837f588fafd8bfce3e7f
MD5 6b0027931ce2fac367fd1b63f5cac561
SHA1 d2f52e63abe8498dc458a7954f674ab9304bcb18
SHA512 06d5d68bf20df1fa35daf8e32d7318a35810eadb781c7fd4ac7b2e0429f6130764907310e1b4a03d5ad6673a183d62921722431bfd0c6f72e7f54da7a102733f
TLSH
T13FB01202E36F4DEA882C27D352FA3A63D69E446DEEE75B197564CA40D19BA2DC18340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 69247f02b41b738c3946873eb0eb8fa2d97f4c39bf54fb8e9e9d95f69089711f
MD5 5296181b698577cbf5c03444b0415350
SHA1 e55f2451d7b57d32222c94d5c0830ed70eaf1921
SHA512 a8a923708e9a19a51f028192f6eac323ae56a2d4989e30cf41d2927e3237264fd2f22070badeab79733b59988ca42912260a8cddc25faddb1a054780a80af8da
TLSH
T12FB02202E22E0CAA882822E302FA3A22C28E00ACECA30B023020CA00C082A2C808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 096618f14a12e5fc9f14dc43ecde9dd5cd29bf3210579680cdf4c1e86dd38efa
MD5 29713c77d897f0553c1b9a37e6d75196
SHA1 fcff52d61b355636ae054af71ad4f82e81547cc4
SHA512 880010b3bbf85ee6b79060f33682062c49d7a0171fd25258c04db45c625a910390534b7c3b054f2d8edfcfd32f8d62c6b95f97f9681a4535c52b38d474dbdb19
TLSH
T109B09202E26E49AA84282AD392F62AA7969E486DADA65B157564CA04C147A2D818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 881ce2323f9ac93875ed15675e4e397b8900fcdc3eee227ae840e9fe8d4c6ceb
MD5 0ebec7283e7625a18af3bb32a25c4cc4
SHA1 7380e0255ced5dd03bfd95b44d25380d74dd5bbc
SHA512 16d7c67601b5b201c0eab8c3b0f8891883c708f44933eee7ba64e2b8beedb18941bf1a7f26f8ab910801f50eeba2f4e1c0e7f089146e47aa05ba7d74a4e34cbe
TLSH
T181B02202E32E08AA882822C302FA2A22828E002CA8A20B003220CA00C003A28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ba80a54e52adb925c73c0fa8080834db54c143ff558977923f9ac27a5995f775
MD5 2d7176add547b67cc2af915185a53077
SHA1 1d14627dbebebada05e542397d3e2789c40428b4
SHA512 c61d8b35de220d261acc0084fe79ec5a251bdee942db7d15c6d9d23a6e984b18aa4170a516d805bea1d7a1b323e48779599126b7b0860a7e153bef73970b85dd
TLSH
T130B09B01D25E49D5442826D351F62552855D445D9996571575D4C500D156569514340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 77e939c2d187bb24d9fa4df59470b40eff4c6be51c71d3b7a09ba25735f1ad0c
MD5 24a7ec605d3f50d15ce581136e7611f1
SHA1 4fb230dac3b7373948fa7b3495d8f5fec62d7f7e
SHA512 5c3e6e75eee94e59684449abf0b6d9668cf9dcc83eb3eb31dd712ff9408b2fd57843652bd40be83922aeb3bd53bebba75e5249cb09115f42a88b062150c7f0c1
TLSH
T1BEB02B01D21E4895841813C342F12552815D001D989207043010C600C042528404300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 15b6e41dbce698f61b2d6cf0c7bf42d75d04c3c189d57abc705c8391a7778b5a
MD5 b456c0fb94be9ea17913e338bcd4e759
SHA1 83444ee229598c34ad6ae81ecf92706214747093
SHA512 3aa16a70914d996946cd41dc5d64b7ef406a86cdd7154bf8e328681bf5a1b041b5ed2fce9c6bda99a299f34b0fe195b34e65b5b16df3a5f2c5348179ab5531fa
TLSH
T16AB02202E22E08AA882822C302FA2A22828E802CA8E30B083020CA00C003A28828300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 beae4cfcb99592d2476b5a86f4669ef3a650c5c7e9e53b426679fe25e258acc2
MD5 d63717b9567de7f8ffd9678679eaab0f
SHA1 7080196df9016794f8ba9385bb9d43271d879a2e
SHA512 c2a5711f8a2ac36cb39bba088508006cdf28cee4c93a184576fa6000ee3e4addf761eb8cde54550ee7f7aba0c4b0d6c2c4f5235690949075a71d7520c53dd1a7
TLSH
T15BB02202E22F08AA80282AC382FA3AA2828E00ACA8A30B003020CA00C002A2C808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 dfefb7d1c923696e2d58a2fcc94602dbce682e69fe8a00e6530206321a5387a2
MD5 65dc252707fdc958cbd828434b4ce026
SHA1 a572f57ed75ca14e8b37d7fd3a1403ebf19df879
SHA512 5e53b1af3b3dc8c9c5de983b8b6e4a0d0e61ef40644e74c24e6cd0c0e25beae535f98c0d19420fe03b88c112897b7fdb70790d0aca03cc201abeaf7fb748a095
TLSH
T15AB09B02D26E4995441826D351F53552955D445D999657557554D500C146539414340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8056f21a9ffc5062bf1d892cd3cefb0886d2ac0361cfa065b9752472516ec75d
MD5 2888fee6b5377ec89f7db44d1b56e09d
SHA1 91c7f163fe0742e04f366aed90774c374528727d
SHA512 e034818d3f9c3e137b830e9b824a376d9094c6c2db497dbaadfe9afa72948d8816d538182755b8ddd90ec9973479b04884d31ded2736558ff8e4c439fcd27124
TLSH
T114B02B01D26F0896401816C351F12512918D042C989207003150C500C00251C404300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5fe42df9c853e204982eef680f7bae1dbbda2ba7f064059551425d547b2f31cf
MD5 ae69309d8bc719c1ee96fb99f21d7031
SHA1 34b48fc2874fd77916c8d6a0b082bd01b17cfe5a
SHA512 54a6ed684938c47b2ecdcbdc06c7dcf833e82b6c4a79393b85a5e24df4bca85d8133087ff1265b701a3331d419cebf6a1e4ef864f4fa24d6a063b3c17569a36a
TLSH
T12EB02202E22E08AA80282AE382F22AA2828E002CACA30B003220CA00C002B28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 684969070fda67a622047bfdec91399b18565597645a8184055156a3c0221b19
MD5 86f9e3c47a14f01484cb2ee7d4f6eced
SHA1 c9d9e0b0a74240c12b1688d8d0759a6b48272c55
SHA512 91c7afe71e1cd0a80e6d202a945a94ff145d6f0efbe1630fcc3ddfa415a93659809a8bb3b423c132fc5597833eb80b90e0f6143adcda2477f511bf63caca22ff
TLSH
T165B02401D35F0CD7401C17D341F13513C14D001CDCD3C7003150C500C00371C404300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 47b94ce2052cad836e51b9cbfdc2ad332c38fc76d933b179ae2bd14ce0237405
MD5 5158daf16b3f1f59ba82adacd5c24d31
SHA1 95edd099f40d58e94975313e9ffd5cd5df1a778e
SHA512 922d80bb52dca54c4cc98ca2c5458fe8b0d04391b448771ad950712034c8b2d3caec2f181e2f930578f14f09191a390da95af8d50ae62bafb57c44ef8cc08697
TLSH
T10AB01202E36F4DEA842C2BD353F63A67D69E446DEDEB5B557564CE00C057A3D818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 822c2456a8d09d3f34e577c288863a15e5c7174bdc4f2732b51884dfb8869a78
MD5 779990a37c417974a10a7555a7f95204
SHA1 9286f46182acae38ad12bfedf39eaa9246e66621
SHA512 a47f158ff2d0182078ba18c8c6f0432e2a4e1cd82edae2c53537e6abf5627f735735f710001e29d8979a4026b52641c4663c05671110347c1d7dedfbd9d4c9ca
TLSH
T1A9B01212E36F4DEA846C2FD392F63A63D69E446DEDE75B157664CA04C047A2E818340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b48d4554d70292c406ff2015469a950b61f553360891cfc5566566ae4f5963f8
MD5 958c97a987a4a70f487ad24b8cb3a9e7
SHA1 2fa84fe96b0d93907c4c820cf36f175054c04c68
SHA512 116abf8c652a9aaeddb581671e6776c8c9b4794ccea89d265fe14470ed0c76e93c5a304d4c68b1c452cc09eed0d538d4f39f087cef480d974585e2e13f4b4651
TLSH
T12BB02202E2AE08AA80282AC322F22A22828E002CA8A28B003A20CA00C002A28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b2e595561c2154850ed093f51a16a8f1a7b58b3e011bb4c2300642fa9c95b7be
MD5 6090f48036e0f472635281628d5000ae
SHA1 4780a85ac728ee67baf18772f0df0a6948ee939d
SHA512 d017f95c7796afdb02fb5ae01f150d286a6fa40d0c80bab15aa04714bee060ac2c9d4e59b256cff312e267d46bf4b01143e9d5e401116e002d61fc049733a881
TLSH
T159B02401D35F0CD7C01C1FC341F13513D14D401CDCD317013010C500C14351C404300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 05bd7eaf8615a209ee99e13e1350afbb75309f2011d4fe1bb979f2b5fc086e96
MD5 50433c6a25f26516808f26d4508340ad
SHA1 d872d9c7aa4ae53fc12496c22a42eecaca78a2c3
SHA512 0888fc3f204a77341f26d1953eb1b65eee35668fa88301905b38fd1a4f4f12d533f85af219ada02a58552b6e35bc1c90265bd7b82f3bc1459b7803dd4de700dd
TLSH
T1BDB02202E2AE08AA802C2AC302F22A22828E002CA8A20B003020CA00C002A28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 46d8dc9edcdbb7667bac4e2cfd279d3e79b25474abc531e49037ca2bec8c33d4
MD5 aa392ddf19d2601e0cc72774d3a9a5f5
SHA1 73aa2e612fe282bbefe8ec627eb0e08b1de725e5
SHA512 1d08a01fba167766f7111e80a9e0a03c64a01144b90ea15d9558952536a5df61035282e7e3ac1181e0139d36f010700f98ff3711d619d3d976d0fa6f4d899323
TLSH
T138B01202E36F4DEAC42C27D752F63A67DA9F486EEDE75B157665CA04C047E2E818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f9718fe2752b24b19cd8f2bb2f9dee178fc5e0cd2b492b58c944b7d4edcc1f89
MD5 a288adff7494e82cb6593f43681e2fa6
SHA1 b07e8f2557abcdddc81be5b8f8195ce4f1863d13
SHA512 7c28246cc662197a9618474052af2d8a82b4b947de555095e360499817cc57b1e674dfdcd0eaefcf3c7510ab7ec1b204ed6f28e6782a5aaa2ca3ab933b2a0d01
TLSH
T179B02202E22E08AA80282AC302F23A2282AE002CA8E20B803020CA00C082A2A808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 dc7dedb891049c17220e47a0d6a7202a5bd2dbcbd35639f831ec01da24122714
MD5 f6444a0a6a249916092c8dce289b303d
SHA1 9836df45468a39bf5b800e83aaabd9f3b5321b89
SHA512 58724d9fd721e1203666fd9d345f6fd878bfd9f55eb51429cafaede266256aab4a1540a2468d8cf82a881391931a04d82c6c1658b23eb1ea7498bbc48e34d2b3
TLSH
T158B02202E22E08AA80282AC302F22AA2828E002CACA20B003020CA00C00AA28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7a2c22a983d5accdba0bd91f8c5c9ea3caffb856015533009e1eb39272a88857
MD5 45c5a45f6e543c7d72d25bb4ba2aa5d4
SHA1 62182aebb42ad4793b10eaecdd21b9ec6565cef8
SHA512 fa90a3408ef3278f30d457fd5b7cef58b98afa3c8202610c7264d9d49d8a23c0d468ab6b74a475e2bd538c35eab8b899c672d811f8dc24467c7af37015aaf552
TLSH
T1BCB02202E22E08AA80282AC322F32A22828E00ACA8A20B0030A0CA00C002A2C808380C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ff8c043bbcb0b43acca5af3cc75b88ac8aeda5328079f814f57f1d109e96dc6f
MD5 bfaac7d1c233c2bcdf3174d8c909020f
SHA1 ea97b33b5f33a46715483aabf9e6f02687dafae9
SHA512 8e9a8235cce30c546c2523779b29a62e723fc1f05c2487bbc9112021f1eb2bf9e207dd3a16b71d732ddffcabc3c9ddf84b9191ea407ecc02992315f01a2af812
TLSH
T18EB09202E26E49AA84286AE352F62A62A69E446DA9E65B567564DA00C066A29818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d1f562d810f069bd73284811b1d341754227d6f879aff7a8ead0a86d9e08cdb3
MD5 804671d11b393f14f0ef97c275dd8655
SHA1 dee7924963773333751c843ea161d980df10784f
SHA512 f03615acebae108d52e8100fc02f67309754755a356b2eb1595fb31f0104aa562a5e934657516a4f121403793061b4cec846cbac517d9ee63a014b0a2f968095
TLSH
T129B09242E26E4AEA842D26E762F66A62869E446EE9A65B197564CA00C047A2A818340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 07cb6351ca995aae13afac59e5b7614383daadb78c9dc1032468610130eae37c
MD5 12c7b730d16577859abdca775c7ab102
SHA1 fb23e5121101468439e5c2a23511e82fb418e6f6
SHA512 0a9ea17ee58af272636a899764db739b5f359cdc7cd14f32d84bd7f758d424bd5704aae9cda0e6c402a65fa2198283a800a767ef7cd8ba874dda1d04862086ac
TLSH
T1C1B02202E22E08AA80282AC302F22AA2C28E002CA8A20B003020CA80C002A28808300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 013197ae2b826df80e6fce6a601267c21ecfa4f14444420f0ab0c673df22ac7b
MD5 3b86b1fd248e0e2777d4f720c064fd32
SHA1 0a2a92be7640739b8a6641fa6dd700344ce3c504
SHA512 96344e52f2c50ea5c9bf166dd8ccf0825e0b67f063925c7ebb3cae77df4c0607d45059089a71c3f003c74d33900a7ba2ff34bcbe5898e4c82c89d4a0e72650b1
TLSH
T1D4B09B01D25E4995441816D751F63562955D446D999657557554CA00C046519414340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f0fbab4aca7872f677efa14d5c72933ad5f548ab16a798828801fa8952c03ef4
MD5 d0f74aae5d48842c3f59642f19f44354
SHA1 8bcef025e1e5eecbbf7175cec82af05ae63d83c1
SHA512 ed6d813da3787d5cbce2f3ddf4ff70ec8e0778ca2f35b7f3c342cb19753c1d4d5e76ff5a3ecc211771d495efca3040c6e2d64b4d8f468a60b4661674770d2b71
TLSH
T1E1B09B01D26E4995441816D351F62666955D44AD9D9657557554C500C056519418340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0fc173e4c90e75bc843a0514628ccba27fdd8b0413357748dccfed764eb088fd
MD5 fa8bcf980f9a2639ea9c64e61b3efd9c
SHA1 36a0681d38f7c47dd6bdd9ae96b5e66f87a9b456
SHA512 a5b0cdf82be5894a0944687bd5392e566be01f124108c3bb097964a8b034dda7fa5f751d5f522dc7b18778c014ddb201bda3352bd1b4c18339ac6ac2f2502901
TLSH
T1B1B02202E2AF08AA802C22E322F22A22828E002CA8A20B083220CA00C002A28828300C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 6.4MB
SHA256 d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e
MD5 ea7aeeebfda6f39a868a6ba491695737
SHA1 01adc9b0769c2bcd81bac32d23ff9776c1a3eab4
SHA512 a233e07859d60c35c7831790547c913585dba9dcf9f82b965f3c9081f0e792f9af925e669ccdeb5b689f7f18df569f20c21e97285d4c17aa594f66692e499664
SSDEEP 98304:/HL3d0WMOPQ2p+COJx5C/YDX6XC7nKj54:7vBOoy
TLSH
T193663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads