27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 19:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
Size 10.2MB
Sample261102-ybcc2agb84
SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
MD5 e7fba385298c6a09de2ed36dee523d17
SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
TLSH
T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

persistence

Malware Config

Signatures

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs

resource	yara_rule
behavioral1/files/0x0007000000024546-26.dat	INDICATOR_SUSPICIOUS_Binary_References_Browsers

Executes dropped EXE 2 IoCs

pid	Process
2460	BridgeAgent.exe
4768	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
2336	reg.exe
3516	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1616 wrote to memory of 2336	1616	2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe	85
PID 1616 wrote to memory of 2460	1616	2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe	87
PID 2460 wrote to memory of 3516	2460	BridgeAgent.exe	88
PID 2460 wrote to memory of 4768	2460	BridgeAgent.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1616
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:2336
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:2460
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:3516
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 2460
    3⤵
    - Executes dropped EXE
    PID:4768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 0091ea95ca4d07e6d8efe65d391509c3e8a8148a5525d0052b13f8d5e04b5c1f
MD5 3a48869a2f0eb382885a98ac5e4e100b
SHA1 f899f2b4b07d8cf45b54af3de63b7374af23dde5
SHA512 b6a031b8d901b480fcf1a970d403bcead8036ac8a04de9d75d81f756ad8a925fd88b73da446c7becf222f0b2e2efdf32e4cd5bdc4792ec8d110eba1583eb2df1
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePY7:2oQiA296ltiLfMppFVWWCsd7
TLSH
T1A853DCDEFF197321CAE601B7E2C106312CBD1F5D474776C07BE900E2A68B602543D85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 28c9327db407c4ed9a3292b5a1113bc499fc0bde6884e34c0a7417b5d10a13bf
MD5 7b001231c1a12667d290c85c81ad0909
SHA1 dfaab15ab691ea0b3a4b4615ada572d723103aca
SHA512 33825c8389fe44a4f8cf5526e51490b56e9dacb1bda505498ebbc9ab2dad85e51150ebc74234b496a90e10dab79f174940d737b701f7297af030de38cc710b6a
TLSH
T1C121FD0094AFCAF606655267633B8CDCD0A0A44C6F5B9B443372DD1E5093D3F78A22A1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 86dafba1fd7b0d160c84fa472b8d5cb95241e9a25488d9851f8d254b65202ce0
MD5 e599132888ffee8e654e51bec6b9acae
SHA1 f12a751fbfb0c4973bb5d026c2266b3a79579704
SHA512 a46c6878369ed632855ca5eb10b98663b2873ad8e57aa4652958e474572d50a2a879e98eaf5487d6c1bfdd521e80ccba2024623e2b2ba62d4124db37255c60cf
TLSH
T15631FE0084EECAF606615227633B4CDCD1A0A45C6F5BDB583377DD195097D3F78A22B1
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 653720d3595c7b1fd362a4236f126a4b8ec274570942aed0f0b2fd6c90b91f3f
MD5 a4bbc4249559ffdfe89dd4d8bf47cc9d
SHA1 8b3bdb1415793e055537dae686264b7a9456c521
SHA512 c64f3686e60e5657a9674cc0e3318f0eb94e29c1eb87118ae253e232c2365ad08aeac5d888aa74b4e74b8290d6327cc90d044ecbd2b2ab16307a80f80ecfd3c2
TLSH
T1A341FE0050ADCAF606A5422B673F4CD8E160A49C6B5FDB587323DD095093D3F78A7271
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 9be567505d7f7759629329a4758d7b010dc0c4eed29b4483ff11781add6c6106
MD5 8d016b6ab7c0d46130f1062889f65011
SHA1 b5b47c7af98271710192e5e40fe19179b77b9b21
SHA512 87dc0cc1d53efe95f91ab5e662932024c054ea9499f60f8ba6f7ed9f20a78c89307bff60b75328924263799392e21b2bb94c64d2bfea2641da392536fa4faf5a
TLSH
T1E851F00055AC85F746650327673B4DD8F160A4AC6F5EEB887363EC189093D3FB867271
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 9de19549e94d0a72a1129a0db736577184122397514f3d154e818ee04c573609
MD5 9debaa3d63565e8495fe561b25177219
SHA1 9f49226f2c05cfd5459933c5a051b8b24fe3f7c3
SHA512 573e98ee8d773f6c946c9b4b53dc12279bf97af516a680e5e5e1b3aebc532063cbe8216d6d502a4b4e3beb3c79b8b3bfb2244bba36b411ad7aba3ebafc7fc8d6
TLSH
T13661BC00659D85F747710327673B4DD8B160B5AC6B6FEA887363EC199092C3FB867271
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 856B
SHA256 e0d6eb5ecac23255ef39ed081cdf47bd5698548ae4fb096eb5c77301884adfb1
MD5 4a40d88511405d2dfc102753a4ba4f51
SHA1 8355408b2e90cc19201a5d6fbf860ec6f360c4f6
SHA512 38f748f56efd07caacc6db26d73d0d1ea96255e08f82dd31013891ef235bd5954c6a576fec6d975fc9c438b69356e140008e4603f1343e198f1da428d5856e83
TLSH
T199111200946ECBB703645267633F4CECD060795C5B5BA7583361DC2E51A3C3F7C62265
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 75c87ce832205b509e16bf6497950902906388cf968c18c2e2a873ee2e28e2ec
MD5 04b0b9d598d203e98dd66ac28dd57592
SHA1 a56dcaaa6e7da9198ce79c445f8eeaa9754d37a6
SHA512 aa945d6c13168ca0a3d969ca1e5f3f2da4e40dd7decfd6fd6607fe3f37a772d3bffde0ecbd822d5c9b79a5caf2e67568a9be97dd98c8bb4bc039699b898ae895
TLSH
T1D171EB10659D89F747710327673B4DD8B120B5AC6B6FEA887363DC099096C3FB867271
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 e90a863c1e5e68d15c274031d3b4ce66a4037c24bb8e9f9c360bad11997a8370
MD5 87713025f9b5be82ce9cd9e109e90a3e
SHA1 861c9f59bf63edf3a0f1a44281ba18758dca430b
SHA512 297e075fc9646381116af2eaad754f41a98c8b01235cd2431b720a5801faf4078e2a7a2827e7bff3fa4ab2753b7ff52ee333a1d560bc47ea11772884c643dfa6
SSDEEP 96:o7yNsZos8svLMcsvLWWPfs0fYjfsnq8Hs0NQWQjZu:HSZLHwDk0Zq8M0+G
TLSH
T12281DA00659D88F747B10327673B4DD8B260B0AC6B6BEA887366DC089097C3F786B631
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b4718f06d5ac964a931bf12c048087e6b46b3b50deb4450af7c61dd4f883ff0f
MD5 89cc37e59431bb4ea5a36013f1d99d29
SHA1 ae9d750292960000dcc01d7ebeffbf622c415891
SHA512 547317444b5b92231af53f37fb3b482dcdac04631cbbeedd347c5dab212e16b5d37662cf7844c1a1db0375c965f23bffcdefdf188e4dbe6f0a152ddbf31f8282
TLSH
T1F3B02B01F5B74874405800D260B8A5415C9F300DD49153102120C0008C0141180C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 02611516613218255475fe070a117c6e34f93074a1eff8978a58a9ba216a0ca3
MD5 6fbff97f178cc27a8cac5c4f98ff53f2
SHA1 ea4e2bbf6b89165846cb3f01d8817935e4a7cc5f
SHA512 57ec8d1b03610496c19c85af635e30f375c292c795478a9def0c6c377f8c7ec0782425d0736d7e06e8a2566e55d2f538fedad4fb1f0f453e33d88918dba5f280
TLSH
T1C9B02B01F5BB4D74405800D2A1A854018C5E301ED49153102108C0008C0141080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 80b610195e75573cd0a80cc798cfb628382dc2a1d4bd2db31fbf2635873d8439
MD5 77091ef3ba7481c78bae54cf0738538a
SHA1 2b1028a136f91f571a04a9e707e7862097c8c8cd
SHA512 cd397a5f32767f3670e8c9405d1651a35f3165a48761615e7a324d21960d4a9b5423468c41b557ebd092bf0992753bb45731791f61ca8c0c99a71b6af2d9c147
TLSH
T1A7B02B11F1BA49B5405800D271EC54015C5E310DD89153102104C1008C0141080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fd233dd6ab6c5f132027e2acaf8fd49fd472207da37471bc1cf20d6bd14fb9f5
MD5 9fd274288fb2aa92bd8b7630562fee17
SHA1 58ad91191f5a9aeaa89c12f31afeba85854e1cfd
SHA512 515914d250f38f32afe24841deeb002dc67d5a016d0a58dd2da275fe3147c7ed113c7cb074a526ffde3fd1ef34a5a89c282b62d056ac976780814b3715d1d5e4
TLSH
T1ABB02202F2BB88B880AC00E2A0A8AA028CAFB02EE8A2E3202200C0008802A2080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 78f77dbce30ed9d07f5a7753d011cf015008726fd76155b39daa8d3125b65598
MD5 1cf1ca4042088be543f1a28eaa6543c8
SHA1 c33d6587e0f08d24fee37f6148bf8820b3ef2b56
SHA512 42e24f52e0096da373effa3312915c49f62804818569983159d1d899282c587268c4f9746501b791912815a3a4aa6daa979d70e74709ee244b97886edcf9948f
TLSH
T1E3B02B01F1BA89B4805800D371AC54054C5E300DDC9153102600C000880151080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 bd8b3ff302fd130f4d236de87e1598805eff099838bb56fffe28220e2cba14d7
MD5 e15791ac7e3b235313599a6ac7a1a6d9
SHA1 f59e09aec9e571365099139f0ada4f1b34ad37c1
SHA512 cf7179c87d1755d287ae1880d68f4194b5d12d4079f200d0b3a947a3fa725608f09479810dfd8b5b6243e9f7341cf4e8a9b01e1e079087193c25233277c0da29
TLSH
T14EB02202F2BA88BA80A800E2A0A8A8028CAF300EE8A2A3282208C2008802820C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b7ac0ce861085f7edf54389e370a4594e526f33418e7249f470c5a06954e4c23
MD5 a15d03932462aa8101796a1b830c7862
SHA1 720c63e07b128d0330acbe6c0c1287a02d2bd4fa
SHA512 b8e55b8f7d3beeb4aca77f01927c3f6a30a659b1755bc15773b698eed6bbb2d2385903e5a5382afab77e82f53f1c0eca19b87174e12c56fb3a028b05581ab749
TLSH
T14FB02B01F1B64CB4405800D260A868024C5F301ED89153102500C100884141080C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4618e3730277b34fba3eb87a444e4a8dd1f1145541c16741f86f09c8828cfcad
MD5 a62b9c82f8c9c3fe1ea492650ae14ba5
SHA1 2004e577242b6e992b0d27999180efaa9a2dd1af
SHA512 3b4a56b8a571a79846465a63ffc38753b01a9576ff977f18f5b57df9146f60ccf02c7a2ff9fc96a0adcd8b64efcc24823d8b13fc7ed8ec8be89c8ef44dea0c0a
TLSH
T1A5B02401F1F7CC74405C10D370FC54114C5F704FD4D153103100C400CC01410C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3c4668814375b0785294473dff4173e0c2ff527ff627ed551ad5964f5f10688b
MD5 d595f5e5e871de64f850289de38e0e8c
SHA1 c7d1389aab3bccf5251a3ce5222cbeecc33a0c64
SHA512 6a2de02d5f170e75d8075f80946f56104e4418a8a5446c1b18f6064652c15c2fbad648d55000fa703e031e2d819b50fd837413d47e36fc7a91443863b74a69e2
TLSH
T180B02B01F1F648B4405801D220B854014C5E302DD99153102104C4008C1141080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 68e695c8a756d2210575e301f61167ab2577c3271ecf71a7bf4d5818875257d0
MD5 ffc854a446faa7e2ab59f17d0a9c27cb
SHA1 d49ea8d41b0a4e8aad169bbfd6d4938430416e6d
SHA512 cdd9c81e78f3d17fdb91f2afdd55fe1650b243054582df24333028948ecd5914a8350c21160193687a15fd738122ff4281e217cf8793412b27952615baeafc2d
TLSH
T1D4B02401F1F74C74405C05D330FC5441CC5F305DD4D153103100C000CC51410C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 bf8ac49f31191121a1a640dbad4da76de4dffedd8373893c5764935e40914a6a
MD5 d8f13d5c859c79d6d98bb698e85388ec
SHA1 1743f9872264d2374805b7829e4c44ebd6b6ac86
SHA512 b5d77729117c83788d86598fdd64931908d6b55e2773813f15786c8b38d3763eabf8cec959f3a484f6ada1acf2b5265e1366d5d39d8dbd4cc5db1600b036a8d7
TLSH
T1C9B09202E2BA4A68805826A252EE2A52886E602EAA529B287A04C4408816825D68700C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e6d26b516c785309f7767e1ac3d1e047b6a557326232f4431f3bb739e8c35d04
MD5 8a7ffe81ee9aaee4ac566f93bcced2e5
SHA1 b26cbb59c6a64b27f15b4d84fcad3a99f682a955
SHA512 7692b9cf1f3cacf073d6095f26d88e519781c2b75c1a4b4d2286de2d307b0b0f7e60aac12e493cf5d00d0a7337bd01a84d5aa61aa1ace1ac03564358bfd75bc7
TLSH
T18EB02B01F1B649B4409800E320AC6801CC5F300DD49253103500C500881141081C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5a8fc893e2796888cfecc23d37cd7e43faebaf55e8c579cd8823e2fbf0d15cba
MD5 46f5fdfd4b38fa43c9b7e57d1f217140
SHA1 d54893ed6f393eb4e6c97a32fc00c073869cab8f
SHA512 18efd2cbad8c663140daacc0c6f6f35e8692287623724daa81e26440ce543fa4c4498454c7670c16f3f90a0c9e036b76fb63e308d51b6a580ea35bf17d16519a
TLSH
T1B0B02B01F1B64878405800D261B868015C5E302ED89193102110C5008801810C1C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6f0067f9349f2850d7b9a39ca5f626459c1c2411375025a645ad3c963795f8bc
MD5 33b9b4154968132b5a2dc856275b9039
SHA1 7e66a1bf74b8afc03b0ba731c70c4a5f91ce5aee
SHA512 e7e8d7877f3bed71fb796d6796e134f525256cfd9cebb4117665729e5c1c14f9608fe1ae897ea16fcec7344eb719e8c8b539a33c97d070c6a2c063d32040ecbd
TLSH
T18CB02B01F1BA4974405801D261B854014C5F300DD49157202600C100880141080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 704424e6878731dc3763b7bb804700063876fe3d65f7208a573a3b0f36e95359
MD5 a35273e17b376ce6d2817b53a3bbab31
SHA1 3ee8f6c56fd8f65f084c7377a09ecc0f79ecc883
SHA512 2777a6d44e1a894213f50f6d1d2efd3931098861ef23f115ba4c4651e341c1d61594de4ed76a2ecafaade6504840d70fe2610ea13f692b6e3f4c1faffa701a50
TLSH
T1BAB02202F2FB8CB880AC02E330FCAC028CAF302EE8E3A3203200C000CCA2A20C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6b88979e8435874637f5edab06f4ed3714a371d6dd0cddf749f5547c8e2917b2
MD5 d19ebb222fcc259f67578ef4d1519ba5
SHA1 0e33fc0b9682e09a8f0beba79f13e5cb707e0c90
SHA512 2fd6b0a40545bf96481035068620e039ef972c838ed20b20f2bf7fdddcd12b5f66c8915563673aa622d65d1cc545af313c234c57c050b21608e229a783c51628
TLSH
T1CBB02202F2BA8AB880A800E220ACA802AEAE300EE8E2A3203A00C200880282080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e24f3bf7a24d77a6976b138ed17b1945491cf40147a0d948f5037e8f9d1a1d16
MD5 ef46de03cf141fb5872fe2c99ea6a4be
SHA1 1e38d6f90ce5449b30076cb5ab2eabc4cd8b969b
SHA512 b86ad4480cd5ead91be9997fc2687241a66f6a291e06521d74825255f4c69e892eaac2f6d6da5fa232c6d940644c9dc27bcda54978f3fae0409b638aefc2aebe
TLSH
T14FB02B01F1B64974405800D271E874018C5F300ED49253142100C400880252080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 460aeae9cb1577d7a7572d0bf075c67413151f91b0e22e7d10427c760cf43433
MD5 8cd2c011289782add68e86c9e6b5d07a
SHA1 d4e5b71ee59b05983d4a75aa7a9e93b33ec976f5
SHA512 011d51f0d6e2f42b6f9a1b158fe93e0cdfd63c25b30b08cfd785a339b60fd0f519204bd2c27847961378d2156ed380a50ef68451b6a503d978218cc1ac195a63
TLSH
T100B02B01F2F64874405801D270A868015C5E300DD49257102204C000884141080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a45e3521180598a5010313a6713e5af15bf0860b06361c91d67ef8508017c58a
MD5 861f2e93f95efad6e62f14200ee46029
SHA1 8d91022791c5e715add90840ff174ad3c98ae629
SHA512 c767b719fe943130491c47b82db606f51f738001b05c066094c18079aac28a9d23234ede949550c3d6e47274e9bc26c113aec18f238eef3a9231b45ae1653942
TLSH
T10AB02B01F6B64974409800D271A868054C5F300FD4A157102100C000881142080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8a5baa22ec19db7757ca4429ba79cac8172d5a6c2e233894d695037aba312544
MD5 83d67f111dfd32058a1dc3c0b33acc82
SHA1 0523baf6d1ae002eeabba81eb6f6ccd8187d4649
SHA512 6b1c1cf73979db336f48d712fb8f1d5a3c64ebed0d72d9adf2ee439e76573a7b73c6bc40ce13d23d5a7e7c1dff06d5343f6432625321106955df0bdda7b58001
TLSH
T160B02B01F1FA49F4405800D271A854018C5E304DD89153102100C4008941410C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8b7a29228a698295c963628091eca1ca3d5c2c0f0058b2eca7c6f5c6ba6652dd
MD5 ef5225ee5d7148709f95ca61811a31a5
SHA1 5eeb31ec496c07046fb8cc6b038e063430e78bbf
SHA512 4ca16d89b81b94c4d7eaba9e2e9ecbb1fcad55a318e5584f539fa3bfb489706283366031257019d4641fd9a581b320abeec55d77fd70f2a7f3f4b1af66915689
TLSH
T1CBB02202F2FA8AB880AC00E2A2B8A8828CAF300EE8A2A3202220C0008802820C0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b1a02f951430c1b5952a0845dd4f2302aa9a545c274c7029e74d9d455a037213
MD5 fd17b560039303c6a61ad97fb4031686
SHA1 9b749d06206a359580faf74788d762d6862e5fcc
SHA512 4249fd97cae186dc7a88b2c46ad3d4a285b30580ea7e76e07d47b65feca006ea42c9527c5004ce8bac78daf3080464d194acf0a5423fd441e41e0704e171e579
TLSH
T178B02B01F1F64974405800E361A964054C5F301DD49153102104C400880181080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7bdca95731b919ed67ca04db419a57b13ca108fa2227c4d968d8487d0fb2d6ac
MD5 38d87e1eea6ac8e4a357098b3e837874
SHA1 ec5c8888ea2e8f5eb1d2c0cf8e84a9fc61b1306a
SHA512 058d43ec700b46798d9b147ecd695c6cf34ff60848cd56e2845f626c40bc538c46c5b59770fa2b53bdd0eea4360cb60dbfad5212ceffc23aa4b8d11fd9ff0185
TLSH
T1F6B02202F2BA88B880A800E220A8A8028CAE303EE8A2A3202208C2008CA282080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f36e32d424f3f250c6d9a1256cffff156abfc23a5751f0e3ed24776fdc4f6ff6
MD5 1f2f40b38150d2af48a314bac7f1e9fa
SHA1 3be0cace77b3545b616f966ef7644607516e6c89
SHA512 15041b2f33446acd505d712684d02b66e5ee99218bc0905e3e8f38ed3ecf06733bd3a857ed37e5432dca8d945b059a7d0f2685403eb75b9743617289a6b19768
TLSH
T1ACB02B01F1B64974405800D261B8A8014C5F303ED49153102110C200880141180C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f68b6c58e152b2076fcd582c86149a8c3561d5b505b946d37390aae2a394a441
MD5 acb047772a64ac7bd17cabc6675d906a
SHA1 30386d245ad37b54ef8c53d9111a96bc8c8e3aec
SHA512 7322841bbe5ef3f2e225e8baf4b98ab735e936be108c72d47214b8dad2db28ce5b3d935e81636b63030f1d4d42d7dccc6c9bd77174536c98ce75ac64c49b9f19
TLSH
T19CB02401F1F74C74405C00F370FC74115D5F300DD4D153103110C000CC01415D0C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7108f8cfd8440d92df3414926e19b36b153d236b4f474cdc59f24649c720ff68
MD5 dd2a86f8e554ac429341e8f2c5ebe563
SHA1 598c6d7f07f7b9af945f991ddef3898ef196ed3b
SHA512 07a0d5cc9c3706831542fadd9edcd11d14f0bc920156515b4c434985cf439bc926c0655498d1a6aec04dbf50cf4c43df9b01652bcbff5f996af2b63acf47a1c5
TLSH
T130B02202F2BA88B880A802E220A8A8028CAE300EE8A2A3202220C000882282080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8c022f6256f26033893301314eef86d88da46c25c000ac3944264d7ce7969a6c
MD5 c4f22158ec3123202e330427a250ddb9
SHA1 1701fa0193c160e7e72b2395e74a1073e8ad7084
SHA512 0db88dca0a648e3e03fb76bdfa0b5ee7046d9a731db633b6a5ea8ae9b1ddbb05c8a5196ea7587299e06a58da81f9e18556689b99ea06021418ce477ac3c11ac4
TLSH
T192B02202F2BA88B880A800E2A0A8A80AACAF380EE8A2A3222200C000880282080C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4d74de3e0e79cd18a9f4f18f0142e735c78bf81573288da198b022b97aedae1d
MD5 310739b386b42669ed8d438d1e4f4191
SHA1 c24778a05133e516ad0d71e3ffb1c1d92efd8aa9
SHA512 5c3f70d43d983e5e434e48d1b76529a51f9fe7bce977680272a32a32f3c896aeaab19b87bf9f9c72363f5878f662510d89e19147dbc17715b3b81543c7a74e21
TLSH
T130B02202F2BA8CB880A800E230ACA8028EAE300EE8A2A3202200C0008822820A8C300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ab987c5aadf893c37fb82081ea92f7833d7bec2212d27a5c2c7b50a227949e78
MD5 66b443f16a6bf9476fc9c5a9fb4bd7a3
SHA1 7e76c4e9b151dedf60da9c8a8ccbbd8fc48da2bf
SHA512 2c553757f119b982dfcf692dc274f22582c09d1da8944328f7e90ecca1992b6087d7d4a1c4dd1c30619f2c28b7c8e7dd0622679b6058acb34964154335fc030d
TLSH
T1D0B02B01F1F64874409800D270E864029C5E304DD49253102100C000884152080C304C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 10.2MB
SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
MD5 e7fba385298c6a09de2ed36dee523d17
SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
TLSH
T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads