bridgeagent | 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7

Analysis

max time kernel
150s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 17:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe
Size 7.2MB
Sample261024-v1237sbs8t
SHA256 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7
MD5 311039476c818e84ee4f5391689cd143
SHA1 cecc3a3fafaf8f845befc59266137f92ab7eaf88
SHA512 2b2e2a54d1b799e2ef0243201a581d3c0f091dfe8aa3c613f712c9e106c5b0e41a1b5ad153c9df3dc6985f8764bff9ab36286111b2cc2feb3c28af7e2b6340ae
SSDEEP 49152:Wkm+Jlt1A5dtyiKKtrijKTVbxy+IP5JTxFWDutiEjpYJZfWcFsNWiHTRoMDX7XMH:WFWKXATuZezT+4XlB9JI/NWWWyx5vq
TLSH
T183763A11BA6F55ACD55BC8B483468A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor discovery bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

176.65.144.46

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral1/files/0x00070000000242f1-26.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
1556	BridgeAgent.exe
3772	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BridgeAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BridgeAgent.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
4324	reg.exe
4544	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4092 wrote to memory of 4324	4092	2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe	84
PID 4092 wrote to memory of 1556	4092	2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe	86
PID 1556 wrote to memory of 4544	1556	BridgeAgent.exe	87
PID 1556 wrote to memory of 3772	1556	BridgeAgent.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4092
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:4324
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1556
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:4544
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 1556
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    PID:3772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 4225de42ac6661cdf0da06b337d132b97fca7ee62ca7a9c063b278126cbcbaca
MD5 8133332f08a00c9f93a8bbbb0bfd2bd7
SHA1 22bd068b5ba61599ceefe05f4cc7653756c57783
SHA512 a59aad38f41f83da4e11db8b661937f3900cf928f44946b08d5c5f725a964955ba0f81bacc985a1b3362d0ec31dae175b714c66e76c57e30879254a7c78f8f3b
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePY75:2oQiA296ltiLfMppFVWWCsd7
TLSH
T18E53EDDEFF197320CAE602B7E6C106312CBD1F4E474776C0BBE900E2A68B602543D84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 6c92aa52a399e05f6ba4eb9ae3d9a13f359417406ecfe0b299da5d40ca16508a
MD5 60507930bb93d0ac47abd3c68c0bef78
SHA1 40f8040d7c1fe2b8ccbfffe72d54d212578656da
SHA512 fa0f0aa06cf5f0968d0b2c27e73406a235d55ae1db9b738b1e2ef7a8713bf3076044fadab208244156ec072f8cee1e88745f4dd5e93f405696b1c47c92884a79
TLSH
T11421CE5044E9C6B74941633350694EAAD771F42CEFCA6794D377EB2C149DE0FA80E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 ec373ef9c01ba9f4088c13fd7aed6ec0ef9f7ad7fb2c227baad99bc946b0acee
MD5 48104dc99eed51a1eb92175e17c6854e
SHA1 6456bd88a7400b044e11f0e0270446eb9f9d30da
SHA512 756d40de3bfc156d617204559dd02c8fa5d1b9b8dcc274f84e2e853589e943872d5ad704c395086104316983b75b4269e3eac4604b13d58894b92c23afa822b3
TLSH
T1A021E05044EAC6F74901733390694DAA8B71B42CEFCA6794D372EB3D149DE0FA40D3A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 d7f796b043f03a3b7aeffe1e56721773ea59bcb1beeec79c0b865645405f58e8
MD5 86c95665ec23a9aee6a79cde42783f18
SHA1 7aeb9bce308f62952c2fcc5ff6712bd5f6e15c49
SHA512 207d1cb7b2015f50b0531f7ff8758ad2f1db8387f0abb5af981d595e99a75e585054185944bb88187250deb6206c79781869d3df5d7bb6c2ddc4392dcbb2a70d
TLSH
T1CE41E14084ADC1B74A111327506D4EAA9770B42CAFCA27D4D323FB2C548DE1F680D2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 5d86830d14151c5b4a19545c113b9cc13df0deb30ae88011c98e804d7188f432
MD5 0b1664940289b5e67948e5da2c10e17a
SHA1 4076fc7dfcf45bb05dadca9e6d3d56fbeeee1aef
SHA512 b2a9367c96bb9e032640c88e3f73f167b3110b17a78cb0733ad0e3ecac1704c9bdec53195bf4e806708adc24639b214dc18a1221d8d3b20d62e09053bd25c68d
TLSH
T1F551BF4084ACD1F78A515727506D4EAAA770F42CAECA3AE49333FB3C448DE1F680E291
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 cfe94a08c16ee42aae99625ad9aa5a458e990d1f6ba3a9ed88accfde29c3ba71
MD5 294ea99c1d10af7455851482d526d98a
SHA1 939b2dedda88697f78c0406b48a0964f624fbecd
SHA512 405cabd27a3853fa4f4cad80e3ef5e926c494496aa9408a5fb9c4565cdcfb67526b2db2a04275affcdc0e698c003d82c437256e69d63dfb59183f998a550358a
TLSH
T14351C04084ACD1B78A51132714694EEAA770F42CAECD7BE49333FB3C458DD1F680E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 d402a9eedb769b1ee190db9f94c494d78540c7fb95eb02ed337e37e8218b2789
MD5 55c825c2f272ea3e524111f9bf559038
SHA1 cf7ed73cc2118dd5b9d198a496286c7fbf651440
SHA512 d3fc9e34b3eb770fc8d9c024508776e5295db85a986cf125ef59345743f0ae8cdf96f96ea66a317846a8e4b2ed6f8ef04a821a808aba79acb34458d4f2af0b41
TLSH
T1EE61D04044ACD1B78E51132750694FAAA770F428AECE7EE49333FB3D458DD1F680E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 20b86aa26096e8e92e14fe28ea3d6ce9a35c35d320d2bbea1b38343db444a88b
MD5 725bbeb5b782fc8451df497a621a81ac
SHA1 67c64ae8d5f18676c9ff7396a4d715408e81decd
SHA512 084411880010347bb0f1f30f9d9295d5cdecfed1d7d1323a2f91cf3a635a9fe2a05d0490724ecde9dc78169edace1de8a5eef862165dd163b3047f0ea33675cb
TLSH
T1E371008054ACD1B78E51132354694FEAA770F42C9ECE7EE4A322FB3D558DD2F580E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 1f7e897520bb21109fec8d34db79e59fa39f1b90b631a16c2cf4c7364558959c
MD5 fc209b68acdd4a18856c1b5d9a934daf
SHA1 4b24cbecb872999c1b5f39cc1f667afcb8d36935
SHA512 48f95c11f1ecded2d72333be6388eeb4f72b83907e76cda9ab8e49cbfa47187ca8c14c6d47ffdaf8489df885eb65cff36e54794009d85225d4d9e068f31235c9
SSDEEP 96:oQKS0Pl/snS7QDcSULelKUPlusDCCNhPl5sSEsnSI8qb1BuQAEJlrlCl+lLllu:X0PmSAhPDLzPEuSDOkdEJlrlCl+lLlM
TLSH
T10D81EE8044ACE5B7CE51132254694FE6A770F0289ECE7EE4A722FB3C518DC6F580E3A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 90ff374b76742e27145f6d1ca15d56466df2167532b7983a22fd505754cc30d2
MD5 ba6007727e978e91c5fa4a7ca2277880
SHA1 fe1cce25cba94629986e5422589b761221f03dcc
SHA512 1b241bda3fc6f1b872b17e4455d78efa1706af4829ef4cdce3db875a96b0beed7800ecf545b4dd2c9ffed5e9feba52f2a7938f927fb96649d18dd6bb1f5826a7
TLSH
T166B09B11E25E48B8C01D27D151E5E951405E444EC57143656925C5C0D495406958310D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 71ceb2374e180a63579ada8bf6ccb9fab6319c5e7523718fd18e94ec80e59eba
MD5 a5cb1ca31e948f0967ec0193bff44c8d
SHA1 4c8a1b7bb90b3c287187ee56b4b595be48561245
SHA512 942d2c49bb3747e83115030de8d962db2529e1eace5082a39804ca96b845c9d47318fce25c201b1faaaaaa7eb3ad87ffa3a6f068c6ef8c236a05d318fe8d215a
TLSH
T1B3B09B11D15E88B8D01826E151E5ED51445D444DC56543656525C4C0D48640695C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f44c4998717b0dd5663225f39266b7691983731bf7133f00e0fb7cee082746f6
MD5 0a44ce3b78e6c9689ed5c151beba70f0
SHA1 ec592e66fb58fa0a95e9529575a9da61ba0f7a67
SHA512 29582b32091fed6622adac8ddbb0ae1cb25f3251b3d2a6260b986f834f3fec3a4afec1027f50e12024bcbb7e9dd52f0b868b9d946ae1e87f276954e619d81a13
TLSH
T1FFB09B11D15E88B8C01866F251E5ED55405D4849855183656525C4D0D485406958300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ef65d3a825d8ed52bc1500b5851b29435d7c84dedfeefdbb26765e0cd9f765b2
MD5 c017f43fc1e6cbd8589f6bea2c57ed8a
SHA1 492e9b50c67be532c2041fda8252c5188e9c7372
SHA512 42e78af8165e5acfd8d88e9ffc8c6c4f1c26f712dce064fca49c42048d83d0654059a4ebf981e207930215183b185dcee4a8a3d1f25f58c19b66c14172f8ab0f
TLSH
T108B09B11D15F8CF8C41826E152E5ED51405D444989518365A635C4C0D485406959300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1b486a7ca87e2257ca29d609b529e3dc6b962d86af9bba7325c3c9eb7288140c
MD5 970621265091dbae4acb5ac790f2b5d9
SHA1 9231dad8ccaaaf738b7468b4cd46942e233748fe
SHA512 1aeb9d100034311190f418bef3372a00a65af575151ff559e15fe100a74bc2611212268fd1d155335c06a32635457c4f1154e0121135e058e150d51d903c45c6
TLSH
T16CB09B11D15E88B8C1182AE151E5ED91405E444E9555C3656629C4C0D485406958301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ec6b78965cb6d84bc4a25b122bfed9ce622437187316325b8be4eb36648dbb96
MD5 802e957c7700ef7d2857effbed43956b
SHA1 c38398191926462e085b1b213238cef95ee6e8d7
SHA512 5140cad42ba6b340fdcf26e6c7538255361e77bca837eaad9478a322802b13fa955ece29dca38a887ead3ea90342ced79ace1ecc85d9e2465aca837b94fdbe60
TLSH
T14AB09B11D65E48B8D01C26E152E5E961445E4449C55143656525C4C0D485406D5C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e7471b00f3e64d141ceea30cd717c802a5dac036477e8a1d5d036f07b2fe8aef
MD5 1c92db5ce926d7c160976b3dbec06cf6
SHA1 912c409de8069def99b83f074491b94ebb9d94a6
SHA512 d7cc56063874599fd6a90c9452103b019f01b0e01f2c8934959c19351ad93616ef399c29584953de82303a1b07279f19256b941db2c7c0d1dac072816de1f715
TLSH
T1E4B09B21D15F4CF8C01926D251E5D952405D444D84518365A625C4C0D1C640695C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3952c95921bdb1e71bc33d9ae36a7c2a169f7da1c2c940699a71f49a42dfc478
MD5 970c961e98f554e19449e89cfdf16500
SHA1 63428ea29f39c5d3f8bef2172f1a6a3ccff71d19
SHA512 95b5e7021e4c71cd9a6b1e5521368439a9a62fa9e9f0f02bcfb5554138f8cd083d86a6167cbde26c7739a49b5751b3ebea0b46e96bafaa5e1718f53d3a51a572
TLSH
T1EEB09B11D15E48B8C41C26E151E5E951405E4449C95143656535C4C0D485406D59300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 dd4225ea00cdc30f4443193f67bcde300baade323a755e912c34651ff59466ac
MD5 39f97c22dc9f97495d3fdfbce9158d6b
SHA1 3932b51566735991d662a4185a5241358141ffc4
SHA512 2ba50c62517dfecf1d4ceb3b5d52273fc24aad7f45a98f4f0b1ab411b0f672c455d67c456ada23de2120c168e68084278a667d60c40f64710d3c156756b0dc47
TLSH
T148B09B21D15E4CF8C01936D155E59D56405D444D855147657925C8C0D0C5406A5C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f01ab6c29364f024fe1af797a2eda47f32c24659accc98c9dc63f8a53e9801d8
MD5 59c19901769b0c5742794f1b5ac5682e
SHA1 d4b0f9d6e6139e5497fd3ee0874c56519b479f75
SHA512 ba4edf6696525b58c6704b5a136ea5c9ae4e8cbe7a891d86ed7f7fe8ea02a085eff0bf40bdc0ea4ccb8e5c954a83b52c9a2ed0514fe1909e28575661c88baa65
TLSH
T10DB09B11D15E4CB8C01C66E251F5E951405E4449D551C365A725C8C0D485406D58311E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8aa1401363b7fd30d4eaa133aaef4df5f1738ef53962c7e4dfa3afaface24c3d
MD5 b4999821db6b3c8d1330ce97060ac972
SHA1 be67c61b82613970446a8b6d2dad96a2d72f975a
SHA512 02c45efd7cce45278abca0bf55072653ec17189ea08a9bd312c584dc362bf118006b5f21eff05a851989acbbad84125116e619da52d92b4ec96f6632d1cc1cfd
TLSH
T151B09B31D15E4CB8C01826E151E69952409E844D845143656625C5C0D1D541795D340E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 069f2b64f6f2b0636ed91e09f9c0dbe32bf590759959645decd28557d04d5b02
MD5 f8723a704b98fcd2a115851f5a2591a9
SHA1 28642b5091819e228e2caec816e4a2a2506a13d8
SHA512 1a712a2aae9c83b5fb1539510cf5091d2eda0fae8c1a82ae76b34c52f369b26b1dc015145b7342f54858f1c0640f74df3e33d0903ff0c26e2ab207c1dc379603
TLSH
T159B09B11E15E48B8C11866E251E5ED51415D5449955143656625C4C0D495406958340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 74732558d1bbd4f5502793427f8969eb1e67c07b707ba9d7bd23625750195996
MD5 78187c2a856d2f80165480d60cba1be5
SHA1 b2244cdf0e66bd9bcbf8cc19fc17ca3249077477
SHA512 2b31d7ef1f9597ae39423cb0a6dc303bf88396cf4d7c5935d5cc752aa7ddfc56a941f84fd18ca5ef671853f7a2f8a357284532d3850215bfb950d04150b9e84c
TLSH
T1B8B09B11D26E49B8C01C26D151E5E956405F444AC56143656625C4C0D59540695C301E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1298df1282ae8eba13522b16d170d67ae307bc57247eaebc7e67cd3aef30a663
MD5 c5d42d6e338770f12b20217ac8c6aa72
SHA1 b615bc07d38172c9f17d52d5f702616663aca230
SHA512 daceb4bc6c1b18a2778882065bd94fb4eba6cb0bbf4e6cd3a5eaa2385496b488e317e92bc87dc8d4297151c64943f7ec24cc54fecdd48e70a7384bbed9a8b664
TLSH
T161B09B31D15E4DB8D0182AD351E59956405D844D845143656525C4C0D1D580695C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 f4513f1dcd61ffe1b662b64cd0ca4fa0b6431e7f47fff7b6c87092735594f9b6
MD5 7c7883d022b1efba3b0cf819b65c03c5
SHA1 2d232dc395b2551a36a12048cc702805699f6ff4
SHA512 85189dfc8ed4846df9d58e71f1e760372b8e4fe71009525ae166f3421c8cb2f262e8294361d88b4d5c31c4f2c8c2dd357a4d4340bed6416b4e26f0992b935cea
TLSH
T1C3B09212E6AA8AA881182AF291A8AA92805F40898D5187356A2AC880E956506A18700E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 307dad7a9bbac728d0dfa24df49b4dcad89de796aa5c1bac9aca734c2761512d
MD5 6b67a5ebec5092944707ccc340c02cb5
SHA1 b55a71e70903490d4500d5fddb41185226f75d5e
SHA512 537aa999c226b03d51450a045d79865d48099f29f842191c1ace38b2c808288f1cc65966e3dc39c7eaf9ebeeabaf057898a7bf0ec765a030bca20bb0913ee3a7
TLSH
T1E8B09B11E26E48B8C01826E151E6FD56405D484B855143656535C4C0D59540695C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f8329f963d6cd807f7c556d6e148b63ad3e41c23fc8ecbfb0a9c1f5941cfe424
MD5 b4c250b60331713a0305fc7f679dca67
SHA1 b21063ef9c439223257c7f5c4145d05aaa59fc90
SHA512 d5f3e983fa0fb09fdc16ca3177f3fc42f1ad22444fae37cb6e528a565ea67b1e5e8db5df2e7651cf56d25392f66a8eeadeb6d435c2e9b5c6bd0fe2e446ef4ca7
TLSH
T16EB09B11D55E48B8D41827F152E5ED51405D444A855543656525D8C0D495406958304D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ac90dd2245790372b2e9d220006804563805ed98ce6d3f49bdf23c0c7bc739d7
MD5 221753b85d777cd1eb52246aad6d1649
SHA1 ce40088abe58e5228de3b95e1568a5ae038a3bf6
SHA512 808ca8620c7e2945e2f3e6a19b0cefd88261c4f0dd5a1bcc074fac978c2eb38ed48b4d15ff100413ee008822e35ee939826645fe19dd375af74a57d04d99e801
TLSH
T121B09B11D15E4CB8C01C27F151E5E961405E444AC56143656525CCC0D495806958300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f7d156c3dd12b5e76025fcd620e31a538b3afa63578091e891fe75c7867a8ec3
MD5 a0f9a96bca6df4a4d28590a113f231ed
SHA1 76b9b4c774661616061466d7d668a72a7eca4b2a
SHA512 7b9f8cb0197588f288d45d8de73e705396835c46fa4104944805e4345a6a3defc9ea44776a9875f5ae1cf55e685e617045673281afa706c87b0bf273fc479bfb
TLSH
T1A9B09B11D25E48B8C01826F151E5ED51405D8449859283656525C8C0D496406958300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9fffc518951e939972fe0056b1d4f4af458a878b875f246dcf85ca2c10b378ca
MD5 2c844945edcefae191536c620586b382
SHA1 840325d119436febc85cf679ca4dff98c304410d
SHA512 0a528380256e1cbac99d45a9c1d9551586f6de756a79da3002557e7e47ac0ce7f67a78df7dcaa5ecc1704c145f9d0057040c9dc07fdd0437722a6ac81999ed7c
TLSH
T1EFB09B22D25E48B8C01C36D251E5E951415E4449C56143657A25C4C0D495406959304D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f539ab4be3bd8b3026da6557d9671e51c266b4eaf3a37ca947e0e4119d100805
MD5 f30bea5ec2d05cbae21c6b48e12f9bbc
SHA1 4d73541ac9fab05a6f22f570642253dafb65b6b9
SHA512 f232b6ea062e80093f84a16c2e9abd7dcc74f00f90fc14d955cb5e0378446a9009fb811671cc9376c5d90a1265bb19b8a42a72d2b6c7786870199e4a5e385bcb
TLSH
T14FB09B11D15E4CB8C05826E151F5ED51409D444995514365A525C4C0D496406D58304E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2edf295ae1e40e4c104130b4a29f18524f05b8fe970e8e670208fe0707e1b887
MD5 538472dad2a7c4a0ddb15565ca6d6064
SHA1 472d70a9d80f3afaf33533656c8da14ca4990a2e
SHA512 0711879573834109873d92d58aa0448b7522e1344586041d49db52e99d8da51f12eb865b42d2b0a143141db2e09f0e48621866cc9ac895af634f598cbb15d8d8
TLSH
T1C3B09B11E15E48B8C01936F151E5ED55405D4449855143756525D5C0D495406958300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 195f4402338fc01fe32b6c7a0a90e6c9fe2d4ab32a0d800afda0e2fb52f3b0bb
MD5 c413b0a9749303f078cd9396e76f4f4d
SHA1 89be6706daf9ecab1920d2db94ae3bd73f6e598f
SHA512 887cce00751c77475c17fa45c93ef8d4c0d5cff7a3ad4db008ff87ba494896d982c4a6f42477409ff2b7c88c8899e048321137c5357fcc3d5da1eb7359c12a02
TLSH
T1FDB09B21E15E4CB8C05C26D251E5E952405E8449D5614365A725C4C0D495406D58300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a8c1b29e0fd2a919753bb5ed505b216700477a685ea14482016f180b76ce2f36
MD5 9f1c83b6f2b14f3a4e1b48a297bbe603
SHA1 342507d7e5278e0eb24822a1db8e5df21d50979a
SHA512 dca872b32fa35de169556e7548445ffa3bf60945398913307c16150983d46312163e1678d6c435cf96d1df9412b67201d30f306677da2fd6ed359040f43cecae
TLSH
T1A4B09B12E15E48B8D11C66D251E5E951405E4449D56143656625C4C0D495406958300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3045c7d2661170b8125c5fad784596665a5f52f7c570204560d0fdb5b00230f5
MD5 3600a5106b12452005351f50dcde83d0
SHA1 32f24b542f2c312cd969fef962df796122110e71
SHA512 61adc8f13fb0eb21f135a64fcbd2661cbd2acbd070874378c2f1c5bf2f19ab001aaac3c8ce10a95064bfcccd007d0f650cf9e1f248f77a16ad422d28de8ad209
TLSH
T11BB09B11D15E48B8C01C2AD151F5E991405F445DD551C365B625C4C0D485406D58301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 75f295c9e18b45aca9b7e7e030830817afe8bad7d0dab24e8f8abecbb9c20b58
MD5 5f1bf4be04d419e2acfee8a213e94fd2
SHA1 10a152bcbe96cfdda3af466c3947c92e866f356f
SHA512 7e857585514de7a3ad5d9b292e245d2523629de14a1b30db74bff0229745b04d059ed57f3e728e7a45a6fd38a7fea9e1f887d4fe85f8d1ec45d355fa618a5f7b
TLSH
T11DB09B51D15E4DB8D01826D151E59952405E444D885147616525C4C0D0C640695C301E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 879cc1980d3391c7e2ab30225f7b772cd7efe7be65eb5e135ee55e164e1c5fa9
MD5 5649bcf1eb22343a3e3d4ecdb70d3158
SHA1 7e69203e54d27ab91581f8afddbc159e1f4b986e
SHA512 75db449bad958d10db68da17cd213d61b219acace9b96e31ed51e4fc5fef50b50315709f8c63971a2e4b4a1de50ac29ca632cdd8d06ed2361188b6f5c002de18
TLSH
T159B09B11D55E4CF8C01926D151E59D56405D444D845143616925C8C0D0D5406A5C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d348dc57401663d56ffaaa3c0279161e1d4821d3e92246b2686bbe6c9355f36a
MD5 e8a593a7423caadeda6eade6f1cb760e
SHA1 e563874ffc317e716d952640877dd2e412ae8c0a
SHA512 c6b3408a163086171f572972071bb6c693040950be15ac3e4131fcd1e9ff0e36d93f63fc1e27c0e0044c3b58f628ad6d615ac38e85ab5129940ab807ecd1c410
TLSH
T157B09B75D15E4CB9C0182AD151E59952409D444D845547616525C5C0D1D540695C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 df253f8044301437cfd873aaea7b2716398ae0fecbecd82f53f33770b41f5cde
MD5 3004e2dfa9912d57dd23daf5bce79a81
SHA1 d7f49d4c748536015f256795b26538b715d03f9a
SHA512 8b4f91491b88bae328eb275361485914cc4d7bbff96b2b9caf27adc0d50cb0b3367b2b70a948e09c9dd84cdd8460513f6ddb25b7175b7e2a7be890e15f9d2c52
TLSH
T1DFB09B11D15E4DB8D01826D352E5D952405D444D845543656625C8D0D1D540695C300E
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 7.2MB
SHA256 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7
MD5 311039476c818e84ee4f5391689cd143
SHA1 cecc3a3fafaf8f845befc59266137f92ab7eaf88
SHA512 2b2e2a54d1b799e2ef0243201a581d3c0f091dfe8aa3c613f712c9e106c5b0e41a1b5ad153c9df3dc6985f8764bff9ab36286111b2cc2feb3c28af7e2b6340ae
SSDEEP 49152:Wkm+Jlt1A5dtyiKKtrijKTVbxy+IP5JTxFWDutiEjpYJZfWcFsNWiHTRoMDX7XMH:WFWKXATuZezT+4XlB9JI/NWWWyx5vq
TLSH
T183763A11BA6F55ACD55BC8B483468A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads