bridgeagent | 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 17:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe
Size 7.2MB
Sample261024-v1237sbs8t
SHA256 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7
MD5 311039476c818e84ee4f5391689cd143
SHA1 cecc3a3fafaf8f845befc59266137f92ab7eaf88
SHA512 2b2e2a54d1b799e2ef0243201a581d3c0f091dfe8aa3c613f712c9e106c5b0e41a1b5ad153c9df3dc6985f8764bff9ab36286111b2cc2feb3c28af7e2b6340ae
SSDEEP 49152:Wkm+Jlt1A5dtyiKKtrijKTVbxy+IP5JTxFWDutiEjpYJZfWcFsNWiHTRoMDX7XMH:WFWKXATuZezT+4XlB9JI/NWWWyx5vq
TLSH
T183763A11BA6F55ACD55BC8B483468A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor discovery bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

176.65.144.46

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000c00000001c5f9-22.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
5640	BridgeAgent.exe
1704	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BridgeAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BridgeAgent.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
1908	reg.exe
2184	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 5688 wrote to memory of 1908	5688	2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe	89
PID 5688 wrote to memory of 5640	5688	2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe	92
PID 5640 wrote to memory of 2184	5640	BridgeAgent.exe	93
PID 5640 wrote to memory of 1704	5640	BridgeAgent.exe	95

C:\Users\Admin\AppData\Local\Temp\2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_311039476c818e84ee4f5391689cd143_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5688
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:1908
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5640
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:2184
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 5640
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    PID:1704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 4225de42ac6661cdf0da06b337d132b97fca7ee62ca7a9c063b278126cbcbaca
MD5 8133332f08a00c9f93a8bbbb0bfd2bd7
SHA1 22bd068b5ba61599ceefe05f4cc7653756c57783
SHA512 a59aad38f41f83da4e11db8b661937f3900cf928f44946b08d5c5f725a964955ba0f81bacc985a1b3362d0ec31dae175b714c66e76c57e30879254a7c78f8f3b
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePY75:2oQiA296ltiLfMppFVWWCsd7
TLSH
T18E53EDDEFF197320CAE602B7E6C106312CBD1F4E474776C0BBE900E2A68B602543D84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 4366e50613785597a7d1119818e43af33a49775d72edde17e7df7efbad4aa2ed
MD5 167440e05c4be12891f869c355ec98a0
SHA1 49fbb665807e6f37230812901021183e48aa1557
SHA512 6a2e3dbf89124b707b58772c8b817aca028761b77071e5d68749714f791c23781bf57ccdd1dcc190c97886d571304450c2797fcd225e637dfa4b6108b379ab17
TLSH
T12021D22080EDDEB649197323909A4D9ED371B42DEFCD6794D3B2E62C115EE0FA40D3A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 ab447c20e0cfa1d4e16fb46809aa294b6005e4252cb5a29c6340215375d2d71f
MD5 fc4c000de4e1cba4141932ce303427f9
SHA1 c897edbb85d1a2e0ce9774c7332667b7941e6ce7
SHA512 69774143cd3d63cd873187766621e9b62b0832c382b4ae4aa8ffbc17d7381962fa8236f5d6835d7d68f4fc81af78443ba3e0f9efc4491111784dc4dbc619350f
TLSH
T1B921C05080E9CEB549456327906A4EEAD371F42CEFCD6B94D377E72C505EE0FA80E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 17ccdac26af38581ba704dc2f789bd967f8a644474d663b0728e09a1a7c97314
MD5 cde5b4424fba06271b0b84566ae01f30
SHA1 adb2ce98626e6388985c3e71e86b1ad2b603a994
SHA512 27eaac67f354168bd2d5d209f1fb4520223b07a90f73075ce587ea27e82788cf412117b34ae91dd8828760d3917e27836fc96bdda062edf9e3b6d263b20b8c51
TLSH
T13E41225081EDCAB64A05632751694EE9D370F42CAFCD6BE8D362E22C544DE0F680E2E1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 822B
SHA256 08cb87e0998760403ad8363dfdf586654bb5065a2bdd56b4a5233def91664a26
MD5 7f9c36a1ed046961f8c0678839b830f6
SHA1 b6d914ccf81604b34f85d0b24e409ad720c1d097
SHA512 87a740124467cb1b9c3e350042d8a9e2b3478ed9cefad6d6c09b48576e60d87cd3f5641cbeae0fce354b38975a4f95f3399aa77cc9fd5449733d9e3b32649544
TLSH
T1B501121080EDDE7606157323509D4DDE9770783DDB8D3794C361E63C115DE0FA80D2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 5aa47011a3a05f434f789e533f793993928b901a9bc669266507cc8630c94ec0
MD5 2c2895d577911ecd3ce62c63cfd67d1c
SHA1 a8955609a705b91c124e5461ffb37d392ad9d8c1
SHA512 34cb01f4bdb2259177609b97a6994c89c6da34ba0aceba6c0ff06e2cdb9cac4435cf2f81dbabf440e244d28e17691b1587150b60fc466ae9e6bce2e8e040edc9
TLSH
T15B41F35081ECC5B68A05532751594EE9E370F42C9BCDBBE89362E23C944DE1FA80E2A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 2559df80d26e2e3593ff04ca0be3580a9c53118d9eeb24bd6b19512e7affde87
MD5 162902b71096a71cfdb83ffd320c246d
SHA1 41a323d9bda866dc618483351cfbab7c6b0b098a
SHA512 a5972caf85a8efee94382853b489691a381abdd504c9b53bfe04d55815c57e70271946678aede155131c87420baa8ece3d0a2021e6037ccc2f23c974aaa35e74
TLSH
T1D451045041ECC5B64A05132751594FE5E770F42C5BCDBBE8D322E62C994DE1F680E2E1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 5657098418d7480dde55376306a7b9a2e19ee272f8a7aa2ce547f1a895ea829c
MD5 525726fcb8a4c32c7773f3a445cd4387
SHA1 baa0a7d96998722f22efdbdffa670b50f05af9cc
SHA512 916dbb1250165e205090fec4e5b1566a86e1aedf52fb1c48612e81337890c14dc690fa04d0139e6ffe1eedd20e0605c9c2e3aede03c03e4914a8f26d2e92010b
TLSH
T12751F15041ACC5B79A15132751694FE9E370F42C9BCDBBE89362E23C898DE1F680E2E1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 3ad172a84f606edc9e46381ee6971713630ebf2a78cd0d02ccacec5af5fbe8b3
MD5 08dad5bbf1fa99b045506f4762720d6c
SHA1 5a46ae1667cc8c3a9da19cc51457683ba1c53a7f
SHA512 7b7896e4d744ea1ef4960edccb73da743d81795cb241ff41eabc8c243200dba8c8d49af74b89593612b4ad5ca6e371ca07041cc4252d6a80eeb8797032c0816d
TLSH
T1F461004042ACC5B79A11172751694FE4E370F43C9ACDBBE89362E73C898DD1FA80E6E1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 583a1e8999480af8ae72c1ffd4a781441966abeb67f70971356a00c5d779459f
MD5 a65e691ef67bd65dde24bc2bbd4d29d5
SHA1 622c0e6e819b4bd846f0a903ef097d2b2ab30a0d
SHA512 982569d2d62a5acfb1b1a93625db43cbf515699740f09c370023e5f6e10ea44264116f4d82597b85f517c5f1ae858eb1fed4a74921a059f1647bd36cb4e85499
TLSH
T1DA71218042ECC5B79E51172655690FE4E330F02C9ACD7BE8A362D73C998DD1FA80E6E1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 2d11ffcde90c5c1ff6e8dbe0dc4d882e67bc0bbde938f198a4a5d9df82e23f66
MD5 5918cf9ca749e367fe2ae4b18c8acfe3
SHA1 abcf5bb72dedfa8a5de9b8698332291100e1dce2
SHA512 c5ca30bdf782c6764e53bc50388bd393cf74a0ada93c0cf951793cfa6caaeedc515d7621fb58ae345de35698006615ac24018ca4c3809df6d8e7ae05e9fdba08
SSDEEP 96:o/Xfj6SKhPllNsFQS7hFhJcSK2Lq3/Pl3stbsnGW21Pl9svT0BBFsu:iX7tKhPPmFT1TtKdP+eEPsEL
TLSH
T18881008042ECC5B7DE41131656594FE4A330F02C9ACE7BE8A366D73C994DD2FA80F6A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 98658dda5d6d139f9559b5b57d697a878b6bc2f9b90240370449276de05a0efe
MD5 f9a328cfa22749a93f6b290d6970ca09
SHA1 27d7ee4275bf736cb73b7c63bbace229b29e548e
SHA512 72c8dba2d534c24e35f1ac1a5e86cadc277b1d625c45628bb0431064acd6fa053949758b7eec8d37c1eda241118f23ea449189cdd7b1813f9a76d2202f01cbaf
TLSH
T13DB09242E66B5869862829E261A5BE82824E4409AA959B59B604C8C0EC1A406A58300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 521e5de566daa59e4ea1604298fae5be01ed1c64b47c6e0f7899620f4ecc9f8c
MD5 6cc6b7f39c49d59a3786b8af673b097b
SHA1 0145fcbc7c10ad9035a8d4c30939bbb0004b757a
SHA512 dc549e01b7449df68b647bc963f3a5cd57dbe93dc6520601c4d8f09931d3dc467a541b0ba0a11ed2de319aaeaf07027c89c3e38792ef139f89f34d2e7f0f8613
TLSH
T180B01443F35F4C7F4C1D11D151D57F43C15F440F555553157714DC40D45541545C701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f8333bf72d5e06287ba076ce5f5dee42312b0ef598d77c302b8f87153ed88787
MD5 9e34bdf200091eb28f5c640496d7f508
SHA1 e8cb767802410b4bbba2ad6bf4e921a0faf410a8
SHA512 0452a1bdaee973b3d28be2a8d8932ccb6d12392641c8890e8040085cb8403b83dbcb561d1617e559441de1db10d9b74848d325c379eda2d5891c2f192f9e58cd
TLSH
T18FB09243E36F586A892921E261E9BE02C25E444B9965632A7B18E880986641A868702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4333bec20bb561d1818511bdfcff35d6af6c1ce40dc33358f728ce5926f0261d
MD5 eee68eb5322ae303134a67497cb693d4
SHA1 ed6e6b2bbdaa46ca81e65ae2b339b8fb77dc030d
SHA512 8e9f0c461513f0a0da61b5d4faaa62c9009aa9b8604f20b8536818181ac69e2c7135661a337854e5cc128b2f725767a83cf0935c5d2e0a6820d252158480d7c6
TLSH
T1A3B02203E32F083F8C2C20C320ECBE03C20F000FC820233A3B08E880C82202A82C302C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 906b0b2e74833b3b5076738b7f2d27650ecedfab46f9ff9006bfa8c3ac4578a5
MD5 88192c814c2d69c7bcf853b5d4853ee5
SHA1 010ac4760e3a49da0b82b9b5584fc083ac7f553c
SHA512 fd49a82ccaf31bfd714c052e68d6065da9075cfd88d4a2ff25c61662559807fdbd7a1255896d72b0fdd10912ceb9fc8636893140acc0b1a5375aa3243f865763
TLSH
T1EDB02203E32F083F8E2C20C220E8BE03C20F000F8820233A3B2CF880CC2200A80C302C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7095548af22469508f1d7ba4e01551921a6433a0163886cfc84c20b6bd654365
MD5 b95733e7037a6301b5e493389c19b903
SHA1 83d77aa03ca74b86d8acb7111ef3938c3fc56ab0
SHA512 0955540b2db0621a13eb662305211d2e4c2080e8cf7b0f08dee3286c29be97538f4410c10d69f83bf2bc0021b1d5eceee5b763b96e0d1ea70db0d4d469a37577
TLSH
T146B09243E36F486A882921D261E9BE43C25E540B9965632A7B18E980986645A858B12D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 baee5791330fb35f7de42d3040e747ab0a26c240a36d0e0f6e5692902c49d61a
MD5 742143e2507a77bfa22580c2d1a54911
SHA1 417625065538f466676f6938c5265e796f10b205
SHA512 5ee0a5e659090f08775007126997a11f69d1498a5a6ed2c8d939f89e3b874b44ce59ee794186fe37a0a1afac1879b6bde6a4e089169ddab5a9fc5942de8ec27b
TLSH
T1FBB09243E36F596A892A21D261E9BE03C25F444A9965632A7B18E98098A641A858702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0dcf5757f46ffa1b50ab8a7273d20acd2146d880a8f62a22c62beaa5da0efe8a
MD5 d2356ae91d93c9499dbbc3421b8153c7
SHA1 1551f8fa11dc8665f1f9655e4b583e4af28bc1ce
SHA512 746b18356fdd5af1b4f431df8a5e8e452e8dc67e43598d59c2fe9a2f9c24108f18206963ffb4ba4fe6c633ac21ef6ac55ff8eb93f333ac72045af336c8fe2249
TLSH
T113B09B43D36F586A891911D151E57D03C15E440F555553257719D4509455415458701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 eb80bf2bb83c0c41d227e6253a7fcf26e51ceffff522f14327ac8d3e4da7cd49
MD5 a67f10100b2cc882987364467dcb1289
SHA1 8718617c14e30ae7239ac7b7ba65ac91a3ca22f8
SHA512 9e6b61947e55c1fdbe4730bfecaefdca02d55decf3393bc39e2931f8a995b6c4b4b1b4a39b070370ae9da2d16602d5963786402a1f9cdc9a0592eeef8c846ba3
TLSH
T139B01243E37F487F8C3D21D261EABE03C25F440F9965632A7B18E880DC6641AC5C702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7e7ee3eacd348432aca594bc986453c107c4a460d8662721bae256eac3f372ab
MD5 ad20b5a94737f7c14a2296ccea072537
SHA1 1c2f9ec092bd8f57e7358f52ebb0fb8222f9f6d8
SHA512 f78754166232b78335374fc5c3477d2a0df002606097376b7ae795d952b55d521177c3f9f4c8f6f8352b63d69ea4bdfb3feed7926a5af5fb84ef780521973537
TLSH
T19FB09243E36F68AA892921D261EABE02C25F444A99A5632A7B58E880986645A858702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4f2f67fa921c4c07747b26e0637a972fda0aade60e8428576eb848ae3b0ae6ae
MD5 15f78ba09479f3d65147b2e5a8c792df
SHA1 b7467a7a149b8c03e7b23cf2e9cda7fde8b42879
SHA512 78c99ff78fe0016dc6bbdb83be400d7f3ab65e950e3822e688333787d512fb6dada965e7c97ee2f5d286e21c969a249bea0f65ef4455e94ed72a764f81655774
TLSH
T1EDB09283E76F486A882921E261E9BE42C25E448B9965636A7B18EC80D86641A868702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0c4ac8bc185f1c90a14442f05bb1a5a6b15a923932589517eb3e01c4ff7bc1f9
MD5 4c2557a33de96798c4a3c363456aa8e7
SHA1 bb7ffd44d4f11a8b0a35fa8a6e9cc44121a98218
SHA512 07a9d341cf8bae37fbc0c1d4893f3b47de39abf160bf849ea2501ff4198d64c0fb0311aa307c34cc39fc56e4796fa0b1acdb4fe3436893396fe23787d41e020c
TLSH
T107B09B43D35F546A491911D151E5BD42C15E440A955553657714D4409465415458701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 17e1a44128ed708420cced8e7f4dcaa99517ca584e0425aae4c53a2dcce045b3
MD5 0416cd6bb8923d2665bb00ac77d62b1b
SHA1 c7ad7a60015354d07cecb5e86730ab024af9dee2
SHA512 b342bb489de1bccdf7be6e1305a465939ad1eef6cc9fed25e8e1271f59f0976dfda4e32dc0eec970d2c1bd36ce41be0cd473d1c159d0fb8e79acf690d0f64beb
TLSH
T1DFB01243F36F487F8C2D21D261E9BE43C25F440F99A5632A7B28EC80D86641A86C702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0b3ff59d794f342797180770a090e21e078cec65d2e3780f6fe06649b2092b41
MD5 c434be58d3a1bb1c59e42c513816318b
SHA1 645df92bb6dc96a88206f972b0581c014e5449b0
SHA512 29611272ec90dc2e9b2c472dab26450e4eb0361eb2ada7151247ebe19e577ba4ce78c5b63e44d56ebd3d00be1688ee24f56d4ba47f116914ef934597c2ecd97e
TLSH
T164B01243E37F887F8D2D21D261E9BE13C25F440F9965A37A7B18ECC0D8A645A86C702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9b0770d287d4dbf40f0f4d95efe6fd88bb166d57b54ca0449e5f7444f33eabd8
MD5 9eadbc150dbad396cb92310cb6fed0e7
SHA1 66fcd3b056fb0c7c71da15f0e0d954d2af15eb5a
SHA512 bc645884f15fc2d71ef27586d8ff0a9a454bba8c0da05590a5795c680f223cbec2ca116e09067d989f51aef3521abfa26f641f927b0a75e2c2754b0388469c6f
TLSH
T1D3B01243F37F887F8C2E21D261E9BE03C25F540F9965632A7B28E980E96641BC5C702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6e4077c8c19b5e913ded4ab0ab7f7ef668c1025a924d432a30d55df7e635dffc
MD5 dcdfafdb1faa9e523119c2e2313bbbb9
SHA1 af7026c8beda2eaf076ed0e777f1b75d50b8b83b
SHA512 aaeea4611580f8b1c3f669c0e1e7b80fd6b430d3d2ac679db78635a72c9074b022dca67df84c0b61388f3fb80761fd32b2b307ffbbc89eb7098e660e2051888d
TLSH
T175B01443D35F447F4D5D11D151D57D03C15F440D755553157715DC40D45541545C701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4772500c028c497b115486762cec3d633e1b38d9a7986b0438686484b420607e
MD5 3c86091603d5b8afbf579ed85b2162e4
SHA1 e06651b9a1606d79c2e1ebbe96b7a4c476c42657
SHA512 c286fc562d7092dc813686bfeae2bddf1e5ccfd3504796e2b1f0841b70c5ae7c79628efda239c545944cd4373e3992828f481e8e95be01bc6c5a4079d64cf09f
TLSH
T1B3B09243E36F486A882921D261E9BE02C25E440B9DA5632A7B18E880996641A858B02D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6f7e834cbaf23a2f2e7d2339da9f7940cebb2ea59dfc7a2b4f6c6270427866e2
MD5 2d55ecfb4ea96c58f07cbaf63445d81d
SHA1 cabcbbf423ccb11bcd025fd5cb6780d6cdc2b0d0
SHA512 5a749623ccbc358cbbbd9703c1c61e3c6863f2cbde3768120343a783c0971c0f8ebb10fdb3e48889de8714b31c0b4b344459650d7ae6bd1044df96ad5f68d360
TLSH
T10DB01253E3AF4C7F8C2D25D261E97E03C25F500FD8A563267B18E880D4E745A85C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7dd0b61e5b25421ba534ebac7f6b98082a3c5342d73f234e41074ffe3eea7bac
MD5 c86bc0c9d7eaed6f5f2bc282be85e835
SHA1 c22e76c0559bf94ff264c07de4ee6e8e626a655e
SHA512 f1ef436dd2082fa364defe94be19045f529445f2a5d0d3b04f6da8337db675a5463f7f9165b6de499e74e955ca2b6f6404b07d852178ceb70652e5d490234c2c
TLSH
T18FB01443D35F447F4C7D11D151D57D03C15F440D555553157754D440D45551545C701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c7645a99a4a09a96ec6c92a78632ca248c8ea8ded548b0723ec1d47596e21faf
MD5 22615a9c349ac51a7a16c1a64d8c85ef
SHA1 c71587b4336dd00d11e379b54c4a11baebfd4a9c
SHA512 43936549a6186d2c3148d95f04c45951c95546da86725a3075319c10be47b8bc8e8fe4d99ba1fe18de9126e61cd7fc86b776adb6c32e3efcdb6fe870314202b7
TLSH
T14DB01243E3AF4CBF8C2E21D261E97E03C25F444E98B567267B1DE8C0D4A641A86C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 61a86c2ffd2ab314567e3cf8ce92caeb46d266b2973168a8fd62072dd3b32fb5
MD5 4ecc1f8cdda9d55d042f9e38b8927d87
SHA1 f4e37ce3cacb596ad9acc36b07003d113568a705
SHA512 18f084dd9751cdea14137c952c1f583f99c2b3415085efd0723a9b02efe66cdfbbb31cef58f6d2b64a4f5296b36959ca779c73a51deb328c10327a4e1503cb8a
TLSH
T1D9B09243E76F486B882921D261E9BE03C25F880A9965A76A7B18E880986645A85C702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0e5714c889af4779eaa4ad6c30060537a82901bdeced72af36e68102bf4226c2
MD5 47245080bf523bc0a7d4c2a95df3e6db
SHA1 a691b8d6ee132abb0a475873ecbfc3e77d41289d
SHA512 d89c457dd5c48ec48cffd7f90b56ecabb4e6e57ff71dfbe183f3f089d08b138686d70600c308189581e2a2c2cb1a4a78e1dfee311a44d403f0ed394789ac81cb
TLSH
T1D1B01443D37F447F4C3D11D151D57D03C15F444D555553157714D440D45541555C701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d987c8a135f6fb877eb7d14f71ef86f99a30e19bb938cfe19e04bff6f42cbeef
MD5 bbdd47f29b3d21035202850af00bfdf9
SHA1 57dc8038b629d9b78982ce95f96477540dbce0a2
SHA512 a1cc26627f49f01444adf17e475d54c1b325f7cda43339b0141c55dd038713b55bc101d86669062938cb3ee73c3e8a2a54c3e66080eba723da725b04f9ce983d
TLSH
T100B01253E3AF5C7F8C2D21D261FA7E43C35F400E986563267F18ED80D4A651A89CB02E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 60989315987a7a1f7d1413c5b8990b53e5f5fddf37beca406b49a95ad553227e
MD5 08294a4b943f538fe2cee5542f9c2940
SHA1 c6c985e43907de81a0ab6f09f9e8706e234fbbd0
SHA512 d365286d05a66fad00ea083a28a37b660b149d805a4b072c3e9edd520f9cf45013b6146a03dfa6fb999aae45e70dab66740325444ad0b6275446476549d68e65
TLSH
T165B09247E3AF486A892921D261E97E03C25E480EA8A563267B18E880D4A741A95C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 27358cb7d441357e80d504ad51744f7afd2bf961872f151efdd0a2e05cfaef29
MD5 79469e6c595363fd3ccd13a01c39eaeb
SHA1 945f0bc7eab236aff79cb3bdd0b3ce0f22cec93f
SHA512 d44fe4b84d41e759c370afb03c5135c10d8a3d5c3d0f7f651e5d53eba5aa66b1c47c5b37f635757622ef45cfd83c76ec67d4197f4010771c16a56e98dcf3d44d
TLSH
T1D5B09243E3AF4D6B886921D261E97E03C25E401E986563267B18E98094A641A85C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 25d38e2bc3689aa8db7461928b332189d6459a71c6f83974dd119d996bd872c8
MD5 082c0badb07841a3749a9c66e21f7e85
SHA1 4b82267cf682d3fc9eccc35ff86bfa29253bc095
SHA512 1397ccd612127f4211987d3985b90a1408cbf469c09f990b776e24c5705e1cb2ee1b58acb94c2ba158d1244a37f0029b3050cc807ce1d9c190b88ead0a664144
TLSH
T13CB01447D35F4C7F4C1D11D171D57D43C15F440D547553157714D4C0D55541545C701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1ca0ae376ebd9fc892a7ace0bd6eef8849b88383e096a1f2fa91e775b7d54a82
MD5 fc5a5e05aeb672d6a7505fed672d67ca
SHA1 33036853628adfbb931333882b11ce695b519e6b
SHA512 2249f617ac82fe9c40dce86adb56ef1d51b4e51ca3deeedf2950a93cce0d0ec5ef1ff614fb01dd9c14a961727d4a728fd1e532649b757750805b9dbbc1d19b2b
TLSH
T148B09243E3AF48AA882921D262E97E03C25E444ED86563267B18E98095A641A95C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8939c75f02a3740aaac613a1a0a847c9bb975e2a8dea356287d849c5471b9ba4
MD5 49bb208ebf3823e735d359ec14d71501
SHA1 cddedb07853945ab29178ae33409288e57ef4945
SHA512 c4c8390672f2369ccb516a7855478304f04ba3f96bb35238e1580f530148150cb0bebed25e04a7e6e1797abb8002a4fc4e5d649ff8a2add98a38f324c4862b03
TLSH
T1E1B02203E32F0C3F8C2C20C230EA3E03C20F000E882823223B08EC80E8B200A80C302E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 977d47b2d6469b8bdcaf0750534f63cba54f98616d7d878141ba79d7d5b17fe7
MD5 f103b8115d3a9ce84a7c999059bac07c
SHA1 c2fd5db827fc224b7624de501a79c4bf4872ac7b
SHA512 b60715213990e5df79339ea80cb1a8d2961a56d4c28bb141c49b374c772bb9dfc3ef613ccf78febf510eb4b31942eb3b25e37451a187de89a6c256de206a1927
TLSH
T14FB01247E36F4D7F8C2D21D371E97E03C25F640E9C6563267B18E880E4A645A85CB02E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1b8b84566c6900090cc4cd71c05304a8e9946d04f966da0f30d41dbd638e9001
MD5 83c660649a3bc6d073f4ea452b4a8e62
SHA1 177da92972dbe2d5cd51bcb27a34f4aac397b021
SHA512 a3e52b221d60be0fc5a9665d25e3b10d6fdce6d0d320c4fb680dc07aeef0e5fb15e60e7bdf485647c39b491141c9bb3613d0482e4f7e3accc78dae38e3973255
TLSH
T1FBB09B47D35F486A481911D171D57D03C15E444D545553167714D840959541655C701D
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 7.2MB
SHA256 8e20316358cd50ed30200ca2264f2db82d8be8dcdce518c9134e91e5353fe9e7
MD5 311039476c818e84ee4f5391689cd143
SHA1 cecc3a3fafaf8f845befc59266137f92ab7eaf88
SHA512 2b2e2a54d1b799e2ef0243201a581d3c0f091dfe8aa3c613f712c9e106c5b0e41a1b5ad153c9df3dc6985f8764bff9ab36286111b2cc2feb3c28af7e2b6340ae
SSDEEP 49152:Wkm+Jlt1A5dtyiKKtrijKTVbxy+IP5JTxFWDutiEjpYJZfWcFsNWiHTRoMDX7XMH:WFWKXATuZezT+4XlB9JI/NWWWyx5vq
TLSH
T183763A11BA6F55ACD55BC8B483468A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads