bridgeagent | 6216c0dcb3ff80c2f6d83814fba60cfdfa70956de0d0b80369e1ae0ae8294590

Analysis

max time kernel
150s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-01_87b788279c956b0850f1dd2885047a20_akira_glassworm_icedid_rusty-stealer.exe
Size 7.2MB
Sample261102-s8za6sxt9r
SHA256 6216c0dcb3ff80c2f6d83814fba60cfdfa70956de0d0b80369e1ae0ae8294590
MD5 87b788279c956b0850f1dd2885047a20
SHA1 09847f8962a1a19b22a066f5038750ebc309bd44
SHA512 9494db6731444771c9f11cd194ad45d7989df56c839f07c0c95020e885aa05bebf72af8b0ae5c65731be46d80f2cde2332cef3c60acdb32ab3eb756c98086d0a
SSDEEP 98304:pH3DG9Urdlw9Ahji5c4LZa/AFptlYs8BhqU:hTGFR98f
TLSH
T166762A11BA6F55ACD55BC8B487068A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

185.166.155.77

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000c00000001c59c-22.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
1968	BridgeAgent.exe
5916	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
1084	reg.exe
3260	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 1084	1556	2026-11-01_87b788279c956b0850f1dd2885047a20_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1556 wrote to memory of 1968	1556	2026-11-01_87b788279c956b0850f1dd2885047a20_akira_glassworm_icedid_rusty-stealer.exe	92
PID 1968 wrote to memory of 3260	1968	BridgeAgent.exe	93
PID 1968 wrote to memory of 5916	1968	BridgeAgent.exe	95

C:\Users\Admin\AppData\Local\Temp\2026-11-01_87b788279c956b0850f1dd2885047a20_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_87b788279c956b0850f1dd2885047a20_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:1084
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1968
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:3260
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 1968
    3⤵
    - Executes dropped EXE
    PID:5916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 273d5c6ca686ff6297654a3a2cdd83693a8daacd434b7780c8559ed7635406cc
MD5 69b5640f13acd165c31b719b55154a9c
SHA1 90d1aa0b16e2ddd9bae9710919906c3079cf7e51
SHA512 e5f61fcf091d540c62e17b71a7464d6490bc80fbe10a5b16028be92483ca4fc9d2ec70da9560191d3ab3bafc806f0adb53c23ffb92e4c8c8a1d07bef4d81b44a
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STeP7:2oQiA296ltiLfMppFVWWCsd
TLSH
T1B853BBDEFF197321CAE602B7E2C106312CBD1F5D474776D0BBE910E6A68B602543D85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 f9d5256a2057c791d3113d1b0fb7b3104e8dc6ded1774e0669022f54f8ad26a1
MD5 07252b1c6d69714673d505c3d575f788
SHA1 a29347e029751e3967052d2089240345fa485884
SHA512 801b2795c88fcc4bbaa7aca25245f27cabe3ebf8eb8a93e69ec04ba90ae5823dc84c07f88621d53f519f9db3f70b600396016a231904c7067bc09b3c00773f9b
TLSH
T1FE21D20005CD41BF5A867567257DBC8AE072685CFF6B2BCC63B2DC0821C3C6E99EA110
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 7ae6c68883931234337a12f0c5898aeaeeee55c36c48ecff699e751cccd027b1
MD5 5e698734ce5e5ebb2b5d1a200c853919
SHA1 ea38f02ec632cf5d0fb680b94d29e4368aae32bf
SHA512 226fe404b90b287a197f8cb717409104b332cb3a4feaea16fd801de45715830d4235fe613033b735abeece6ce4e5ad2f71e6f56b62ad8d26fba1f78d879b8fb7
TLSH
T10D21D20005CD41BB4A867527257D6D85F172A85CFF6B2BCC63B3DD0861C7D6E99EE011
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 cbd2c287ffb3aaef3b58dbf52e9300ad65a36f5ea0a2b2c59ea56571e1fd8b5b
MD5 0b13060db2be7a72c81a032aa6f9e2fb
SHA1 e771150720b4737f5c6b2975e1ba444184c528ac
SHA512 84532c95781e41fd7c917866e0c9967abcfe32bd48d3aa53f8ee548cae9e0fabbb3b0d5bfe0e3a5f3a398cfeda8c2642e19742f4f23fb8f3d9dd5eadc48b307f
TLSH
T1EF31DD1001CD41BB4A856127257D6EC5E172B86CFFAB2BCC73A2DD0462C6D6E99EE011
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 c72ca6aaa5ce5e5520519a2fce5b6f9fa3468bda210ca88d0e702016a0077bf1
MD5 317fdce92bc72ab6a7e3c62c51c08b39
SHA1 0f7da2e85fbcac1edd35f49db9bb3117af322e96
SHA512 2773c069796c26ff178bade87b68e52e8842cee6dcb19452e84b6694322a9677d2f5e4b5d0a0ef17409948a0a94510b4d0f8e62cbcbf7cbfc39a84bf221e9e15
TLSH
T14241AC1001CD81BB4A866167257DAEC5F171B86CBFAB2BCC73A2DD0461C6D7EA9EE011
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 f46759d26e4c1f508794a17445c00808595b3819ce1bf19cb2f900a877111300
MD5 4bf313a5d81207db108f794391708a54
SHA1 f525fb4d46fc5380845cc41b6dd9223cc6c2fbd4
SHA512 dd1f51607db7367f64ce00370c22ce36f1dbae5ebaefb75db45fb60598ff8be9d89b9bbceb0363362b5264d650bc66b709d4608600214db2373febf4ec794f5e
TLSH
T1B041AC0005CD81BB4A866167653D6EC5F171B8ACBEAB2FCC73A6DD0461C6C7EA9EF011
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 e1bade48af6041119a555d7f1a41af62e221dc1f758913851bf6fd6bbd08c820
MD5 ee808d07918a9f88ddadb2d77d67ebec
SHA1 f862e26b6aecb7c92d9e75880833f8a9c0fc793b
SHA512 ed1fd50236608a8492f4d5d40df91c5f0ef38dd99da81acc0cccb2c550a4d06cf4fb3e5f4492ec8354ec172f641cb0995f98f60327c3d49d029e78b8fbdc7940
TLSH
T1A451AC00458C51BB86466267253D6EC5F271BCACAAAF3FCC73A2DD04A2C6C7D99EF011
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 816B
SHA256 5a53e0c5f53f5a83f8c0f7f58c93742ea8116d62ed7cc08ac29f1ff3c4708f12
MD5 6984b2af810c1d3ae737a29221c9bb87
SHA1 593948f6f3d1caa8a98a57c36bfbdf901c00b871
SHA512 59716ff114bd30fcb61bf31140f35ed3309ab7e4cd3f6f60d98e4f863387b29bfe96abf17f49c42e8b5e284b8a75ff9410da927407b2c2aafc80464c4839b478
TLSH
T1C401CE00018D417B56897553317DBDCAE072686CFF6B2BCC73A1DC0422C2CBE9DAA010
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 0d0c925be5b439f43d49ff4754a00fdfb15f1cdfbb60c2cfd78a51231765c8b1
MD5 3f792d63a6b91e4d45f09768c9df2349
SHA1 7b9fd0c654b300efda199bbb1d1cf2477428b4c9
SHA512 da252b723c0dd43a103b40b35c1c386f828777297d2c4258f2c01df4046be43178a40aac601dc5f601b7cb5bc7c35161209ae7fa993362d968aafda242ab5443
TLSH
T13161AF10058C50BF86451257657D6EC5F271BCACAAAF3ECC77A2DD04A1C5C7D99EF021
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 f4c3d0d8c97ae7d266cd54ca80651d9ae2eb1b24c96d624bb82941c51a61eaeb
MD5 e2877a128f7f37d79b0fe48f37a25c3e
SHA1 df1562c4303cb32b059f3c3efa4a09ff9fa37a65
SHA512 a57fa7b86044ed1d4c978f52e02923eec90c5539b0e4842b2d2e2dd195600180e19439aafb656362c162d153af35b7f60c105e268b6568a115d10152857aaed9
TLSH
T15371AE14058C90BB86461257657D6EC5F231BCACAAAF3ECC77A2DD04A1C6C7D99EF021
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 a7758a4f68715544d9948698f4babf96500d2653b3962c398b295457d3bc5752
MD5 d8eb2aa3b43c876ed550c86e5865dc34
SHA1 ed3de4580b1719951af069fea0b0539d7084c54f
SHA512 e5abe4ebe6b4c48c0843ee1e846df18c2b83b73ac08c878b546f122753d1614acb83844bd90a4defece294a8fa0a49b5eee6c9c757f586d1c7d726836093f986
SSDEEP 96:oOXhjqnGsu2X7qWqgcXh1rULqp7Oqs+qnBsu3A2OEgsnrv8HNqkqnKsuz49Iz9lr:JlqtB41qCgO/q5IuS
TLSH
T12B81BF10058C50BB86421253657D6EC5B231BCBCAAAF3ECC77A2DD14A186C7E99EF021
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 aa3afc691ca935b98bd60838e7489b5e9318135c6562e0c33a5e1bc5940d9d82
MD5 ae0b0fb4d7853ff9f956b2c9e8b6e7b5
SHA1 2f899efcdc3dd0afb99ffaa4136bc14892cd727f
SHA512 7baac1192bd47071b056df10bd160e3d8f57ff27c243cb85e750f4603793d774bf5be3fcacae76396b054f9238c40cf7d606fb275b33ac682378854993c2bd3b
TLSH
T12CB02283F33F8C38882A03E280E02802B8CCC30FA808032A3C00C200C00EC8CE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 03d1b10d8c14e6052d633f923faba9fcb4e085283d873ff2b0bea544cbef117d
MD5 a7c9784f2ca177ddbaabe9159da33d56
SHA1 5d00221d7de7f9e1234d94292834115ac45f3c02
SHA512 966938c4ce3a8748cf7854dc056d5ac7e85a65c19accd1952de2e76c7fcdf0e2d3e8b257e78dd7d49ff8d27521c9e756b26c898cf0000a69efab0b81e642c8d6
TLSH
T1B2B02203F33B8C38882823F300A02882F0CEC20FB820032A3C20CA00C00EC8CE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3214eeb79f85f02aa1985e32588cefaa2dd2ca292b58fb8a12230eba58d8f752
MD5 6fdca151759c9e77fa45e9276429a9dc
SHA1 cb2bd770368db543bc13efb94dfbccc309995d06
SHA512 efa668c67140bd5139145616269ee3530fb86cad212da8c50834fa08ad5d486ff86f363eef5e9634e09fc5f91b8a4f9ff70ea04d752082f3240aeb24cb2c6e2e
TLSH
T1E3B02283F32B2C3A882A03E282A02C02B0CCC20FA880032A3C00C280C00ECACE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 144947e9fe602023f99dbc8ecb0a325a5e50904622224f80b9081aca62ac7cd2
MD5 9a044f4b7421ac63a53434c850741adc
SHA1 1732a49116b51f5b6c77166ffede70435c1d01bb
SHA512 3bcd36c3da7b61849993194d5734ff84399d25a47349bf44311ddf60dcff8adfda6a204652b7e093b702e86a7c477e460804f910ba3446304d59f4b00e49bc34
TLSH
T1F1B02203FBAB0C38883803E200A03C02B0CCBE0F8800032A3E00C200C00EC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 bced62765a9254a964a559cf4daa596d15af9fa6f60a3120a43cac0fdf48b880
MD5 7d50c1c1490cb432e9ed3627d96b89a5
SHA1 e1a4bf8b458b245146367a89996a27f03514c900
SHA512 05c1c56a6aa8af02ef6884ed1d6b582cd99ab41e605a69b22a3f0dce0b792efd6deb72482328c3a4592c36de3e104e64da4238d591399aa79763bcac1635b095
TLSH
T104B02283E22B0C28882803A200A02802A08EA20FA800032A3800C202C00A8A8E8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 16ae753374aac4f6b39f10f3c19b57ee6fdbe3ea49b7471c1f10e26007024437
MD5 12e9b0531d561532103dee0df0d806bd
SHA1 1eabeb9e807fc551d84ec1c0c57bfa236402461a
SHA512 774db4eb8dc9a119cfb714d7c86c216a54edc603ec4e1dfda1433ef2e95b66d0dc8ea970ef88cc3b2be7163c604f1c72975a2d26a60898af8ceeb37638262581
TLSH
T17BB01243FBAB5CB9882E17E251A46D03B5DD921F9855472A7D19CA41C40ADBEEEC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a869ffab87cfa20e9eb2042104b0ca6aae02225c1812e9e5e78873a59d687c94
MD5 f4b51dff69bd01f3dce43be1ae566d55
SHA1 055014a2cfa1cd95f848628096a2b277c8fb911f
SHA512 0bf11e0ff2a952a2d02e881b699f5c072d38a1bc919029b040b5fe8f3af097388af8c12aa66810e5a8fd98677a4076cd3d99950f4bf2625626251932da9fee61
TLSH
T109B02203F32B0C3C882803F302A82A02F0CCC20FE800032A3C00C282C00EC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 48903ef9b7f0e9c100ab5cf23d0e20d7590de76b4d315d42fb0863eddecacbb7
MD5 a18b4d26cd7232f75aedfa4e884b1565
SHA1 f3f42b0da4d5aa9fad9c5c6ec099e1b9eb227959
SHA512 c509a09d868a4b01703ff38a4eac903f2278417a9e8c10e3e58a918e2dc8dde67fae0008a2ab6362c4adf5d63a3e75fc7fc9249a973981422fd7f59a6df3348f
TLSH
T118B02203FBAB0C38882803E200B03802B0CC820F8800032A3C00C282C00AC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e5ad50d5c95c62b1596b018655d25f69618cb13e752a1cc59abbf1b9e070cc37
MD5 07a5fd6a94b96fffbfe6a75d9729a1d0
SHA1 33bcac19501ff1d12879d0524c7bf608ccb20f3b
SHA512 d2334d30507356d0cd24f73eda58151330171fdbc6333b421dd8ece328b09c515da0b161daf327e6fd7f37578ecd983b4feab8e8c0cb0088e35241b51b653a33
TLSH
T161B01243FB6B5C79882917F251A46D02B5DD925F9865472A7D15C643C40AD9DEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 555e37ad99f7247715a65ec4933f65135c754f1b09fd95e92f1172d52d6931b2
MD5 4016440ffbf292bca27cdd7e20db1291
SHA1 7325eded9e43662ce34e950f086c8834e0918aaf
SHA512 d87d8907a2e82c7f59c18ac7d864c913f674be6bc30ce75520e320e2a943b8bd2750bf3f639030b13d422c58350dd55ce7a66d7f3c10f9c33fe5a208acf3a4af
TLSH
T1BBB02203FB2B0C3A882803F202A03A02B0CC820F8820032ABC00CB02C00BC8CEEC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f85c79f7d1a1e8d5ae4d92267e8c962e5ab84930abcc6ad91e2053df90cf0962
MD5 027f3765c70bc827a07f63f122e558ea
SHA1 9d64b43897dd8728643e7a7200b4ab0fa014570a
SHA512 ecbc871fa0c06074d4eecc013830bd8819de7c7c6c8caeae58bfae08c742ad21898ab53af07ed586c639f13f7d298b2d9c589f5bb76e54365c66d794cb339844
TLSH
T18CB02203FB2B0C38882823E2A0B8BA02B2CC820F8800032A3E00C302C00EC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e24e818dd90c68e3f0755ca1f072ef0e7b255957ccf160ae5ea112826a451a1e
MD5 6be71b0e852f9eb0ce9b6cce8a10c187
SHA1 2bc1bfcbce77f338d9a5cd07e0ce1b91f6215f7a
SHA512 23502646e1c43a500a4df17be57455fea78ec5370564c3c6632134c92d3c100c5acb464126e96d57c47463b6c1f83b9c338844c6dd70df5592bbcc7f3f4fd0b9
TLSH
T1BAB02203FB2B8C38882803E200A03C02B2CC820FC820832A3C00C200C00FC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ababb57b8bc45ac896303c4053705166c6ff859fa6a6f122546dfbfcc1fdeded
MD5 badf3bf3927a74f0eeb4d2535a18aa67
SHA1 08274ca1874221a7ab2023ec6bfe3a4baeab1ed4
SHA512 d63980ff4d5cafa91a2448c058ac5e19dc32ae08bb4a8bd693fe6a8023ca980d22a09b5f77e8c097851ba233534b3986d06ed71b4049a2ef0cd87bb2e6d606c1
TLSH
T1B0B02403F7174C34C43403D100507401F1CC410F4414031D3D10C501D005C4CD5C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a2a968abb91ef328ab0e466e481a6e642b34a23f8c5b27862ca881b743e673de
MD5 914837f3162a2c16204f1c5203d658c7
SHA1 6c63eece74946ab001f91cfe417f86e7f6ba6389
SHA512 b706c92dc782804c1aef1bf983aba36489d982123d3079fb480ee6e9439bb660433d39fb579bc54c8ac5acdbc6e0581f64af14d7097df86311553ecad17363cc
TLSH
T19FB01243FB6B5C798C2917E351B86D02B5DD921FD859472A7D15CE46C40AE9DEEC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2fa869c7a32037bb90689e10033e9697bf2777c43c99665b80ebd033ebb7744c
MD5 11d41e115d05cc688c5ada7bdc039a10
SHA1 0dd9984661b5bddf1dacbb2bc236dfbfd25edd50
SHA512 8c2e9076b8f2c156f194f27f1f2f36f20db4ae13781ac52cb08337b7e191f3f6858b66c681f91cfd0190b05c5faf7a053eb560dfb5fafa315d1fe8094b8490ca
TLSH
T15BB02222EA2B0C28882802A200A03802A08CA20FA800032A3800C202C00A8C8EA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5982c4fed242c2af1901915aae80a22f1f84d68c1fd69fa3ecc5c8d133bb88cc
MD5 ba415034d913955eb46e939ca90ba17f
SHA1 6f3a24c222678f989dc9fcfcaeb2e9af3d160d78
SHA512 7869203341f6e7ac977a27002a89241ba222ce585d02d86dce3a79f27dbafc58d6ae11504b4bec5a8407f9f333e9c32b3137d8d912a24c80b003f825ba9b5332
TLSH
T155B02203FBAF0C38882803E200A02C03F0CC822F8880032E3C00C200C20AC8CEAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 00612c8e817f57761833b87f8520c0744b26f6824195aaa14c9bea4bc13e76d8
MD5 b0126efecf58a9754ed7fabe7d2e9967
SHA1 672fce61074593006bf24d1b960f6e230c9789d0
SHA512 ecd09966740ff6d980db6a9266392430c44031b0984f49a527cba8de75b8e1f287007f1f4c1acac970e1671608c5b97edab2a2b6a7c2ef3790a6a4469ede9430
TLSH
T138B02223FBBF0C38882803E200A03802B0CCA20F8800032E3C00C202C00AC8CEACB00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a679b1bed918712548166fbeb6472927b9afbbab04ebc758eb75c471a03c7ddf
MD5 6cef578763dce01986a380d6e2989b2c
SHA1 27fda4cf2b8b287a5462fd01937586d5cf25d539
SHA512 e2b8a7c1dfbdb4d3df5124fbc47bf2370eaa22c183acaa6b55a97da458603ae5e2b714596b6dad91c2dbd23403b371d3477001285e924f1c711c2ca81a83e697
TLSH
T105B02203FB2B8C3A882823E200A02C02F0CCA20F8800032B3E08C300C00ACECFAC300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4c40b80cac5165565f72f5b43758b0b86a087a6f7f0ab6994402fb082a732737
MD5 4f71a329cf2850241b1ee37d28f2db28
SHA1 5a7c5d6db968f6c99438349a3a80ccf25c5594ca
SHA512 28bf2e1f582be3a3f7c572cc3e8cbd31ae2f479dd812a7454891cbfe04231e1e3224aaa4549ed4106cba4b3e6a58e56680fc4a73b20b1c0eae9ed6d95a5dfc6f
TLSH
T17AB02203F32B0C3888280BE280A02A02B2CCE20FA800032A3E08CA00C00ECCCE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 8c98942ee15d6293f64c1250e0a19412f6e87021281441ca700adb17effd2a4d
MD5 2aeb56ef36e800d99857128a517be629
SHA1 af6668dd504244599899018956e8e8c66b4f04cf
SHA512 d7d8a1194686ab0e1b17050986bac5684accb6907511011792009a17536aeb66f71ddac97afc7f7705d1c4f6c06eb79be3ec03d6269940598d3907d79d364dd8
TLSH
T1A5B01203F2AB4D7CC42929F2A1A52E22C58FC11FA9578B187D05C480C50ED9DD58301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 02f8f6af6d4bf441761af8a964d87f87a5d3148b94b24e30493b9c163ce5de31
MD5 a169e9159fd3837d16eae2d0680eaef5
SHA1 59d0b13b53c93a8ee88a080738ccde1b6c35c578
SHA512 8022fc00503cff61148e3fb6865573616d1100377ba68c65ab43d7a5584b1104df6b007caeeffe30c16e30ac164f197c78c10398d4c890033a99d7c780eef645
TLSH
T1DCB02203F32B0C38882803F200E03802B0CCC20FB800032A3C00CA00C00FC8CE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6d95e24b959c9ed773a4d9fccf01c6bdad0fa85e0546e06210ffcc8cc538ff47
MD5 84c8f51d239ac2ef9536781a5df03b2c
SHA1 8399ee86df240cd96d61f702359bc1e6d6924840
SHA512 5c876f8f56a662c514daf07c0044ca277a531011306594ba786e2f479cf6ca629eff7e16ac98946efc3c5c5f220fe7b89610435ca6c872d2801a7953288b99a2
TLSH
T19FB02202E2AB0CA8882802A220A02802A08C820FA8080B2AB820C200C00A888E88300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a0f67e8b62dcd7fcd796ad9ba3faad601cf1611781659a1b42649064caf99f6d
MD5 a75b87a4c61c6119caf40956eb71ded6
SHA1 0b2d63a3ed65da5a8d5492f0c4d5c840b412fecf
SHA512 b9030f53591c8aef2a3959330d254795b0639a9403a30b0f155be8c72410bb961e830756284441d66d78b85f17325b8c6d7576194caaa32569532a329fb50366
TLSH
T16BB02202E22B2C28883802A200A0B802A88CA20FA808032ABA00C200C00A888E88300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 38dda04965fd5fc59f209c1dc8c6d56b5e8f11eec454c8f8ca1ac4e4ee34a0b9
MD5 a3f35d0b441902bfaa06aecc8d493cbe
SHA1 344e283a7e80b56d5813c1415cf1c6edaf5a9702
SHA512 2da7debf60862ece8c686468c5b4355b7386b9b4eeed0f4735742419eb6646290595a11b62d06a692c96b794b76ed9420149cbc1e00266be58396ad1be04b394
TLSH
T177B02202E22B0C28882802A200A02A02A0AE820FA800032A3820C282C00A8C8EA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2664409b78d804e89dd4c4915cd1e511c1a88ac41c2a95e2f2fde1f270bcc0c3
MD5 483880b632226c496b7ab81f51a5deaa
SHA1 2433520a5967a37519546735c7ed597f27369810
SHA512 c296388043509ff8fae175db528dc0ff2136d4bb8c5fb202a41fa5057449a13a272c4074b442b5f0fe08880bdc29aa13d67a5a633105e54496285e514fc32703
TLSH
T124B02203F33B8C38882803E200E02A02B0CCC20FAC00032E3C00EA00C00EC8CECCB00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e0dcc81da564d17f860b86d93a080006e9da7c5201d0fe4aa40304112f4131b8
MD5 de762854377b8e4234e20eb7ee82b408
SHA1 9d46b8f3a0e764014b5d515f2bc5e2224f98c770
SHA512 16876c34d39f4e518200831e7ebe05caf281479a6677ee437209e3ca97e9f948ee5e6440aaaa98aa42d0feac590403c23afc1b9800d76ab9ad68f9e4c2b10b77
TLSH
T114B02203FB2B0C388C2803E200A03A02F0CCC20FA800032E3E00C200C00FC8CE8CB00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3927193b4352d002e5bc31570ee879c70f3bf35cfc55afec4392ca2f6bd94b98
MD5 0e2d54ee9505cc772330681e4aeab654
SHA1 8e747e803d171dc844bac77f9bb099e2713fcade
SHA512 71ae4b386a1168c6c1fc74e67904ff9fcd317df0ecca8e35a9e168ef50e881f9effdf06cef2b03bbaa14a85c26901b8054d91726bdc5c5fc052ea02ddf60ed23
TLSH
T105B02202E2AB0C2888280AA200A02802A0AC820FA8000B2AB820C203C00A888E88300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fbdc0809e4b58b0045dd9e8e48a5c0beb87f3903beca029341d94405e7508e4d
MD5 885c5de773ba6c72e206e7c907f82bdb
SHA1 c2b6e892a8bd6b0b010f7a51b92ddf70838ab400
SHA512 33566749734af97b9da6e281858d62b8d7296115deadf390f887b7bd769f4384555fcba4ba1aa54435d460be78f8447d4818a9a5ff800e19c677f28513cb6027
TLSH
T189B02203F33B0C38882803E2A0A02802F0CCE20FA8200B2A3C00CE00C00ECCEE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 91d06ef53a549931e8332906d205792431a26492f9135ee4408c984d053578c7
MD5 fd8b8fb2163949297a14c09c94932047
SHA1 101e0c8e9618cb9b12c0cf018862ef13cebba3a0
SHA512 65c325a60618e103e5dfbd78f157e2c48f581ab0e860415f444634608d4090981c076610f986e4bec6d004f300eb46380c4cc0325fd0040978b1847882ae9936
TLSH
T176B02203F32B0C3C882823E300A02802B2CCC20FA800032A3E08C200C00EC8CE8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 7.2MB
SHA256 6216c0dcb3ff80c2f6d83814fba60cfdfa70956de0d0b80369e1ae0ae8294590
MD5 87b788279c956b0850f1dd2885047a20
SHA1 09847f8962a1a19b22a066f5038750ebc309bd44
SHA512 9494db6731444771c9f11cd194ad45d7989df56c839f07c0c95020e885aa05bebf72af8b0ae5c65731be46d80f2cde2332cef3c60acdb32ab3eb756c98086d0a
SSDEEP 98304:pH3DG9Urdlw9Ahji5c4LZa/AFptlYs8BhqU:hTGFR98f
TLSH
T166762A11BA6F55ACD55BC8B487068A239E2130DB1B3AB9FF018486393F69BF01B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads