27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 19:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
Size 10.2MB
Sample261102-ybcc2agb84
SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
MD5 e7fba385298c6a09de2ed36dee523d17
SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
TLSH
T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

persistence

Malware Config

Signatures

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs

resource	yara_rule
behavioral2/files/0x000d00000001c490-22.dat	INDICATOR_SUSPICIOUS_Binary_References_Browsers

Executes dropped EXE 2 IoCs

pid	Process
2208	BridgeAgent.exe
3320	BridgeAgent.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
4008	reg.exe
4884	reg.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 4884	3448	2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe	90
PID 3448 wrote to memory of 2208	3448	2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe	92
PID 2208 wrote to memory of 4008	2208	BridgeAgent.exe	93
PID 2208 wrote to memory of 3320	2208	BridgeAgent.exe	95

C:\Users\Admin\AppData\Local\Temp\2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-02_e7fba385298c6a09de2ed36dee523d17_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:4884
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:2208
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:4008
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 2208
    3⤵
    - Executes dropped EXE
    PID:3320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.db

Path C:\Users\Admin\AppData\Local\Bridge\agent.db
Size 60KB
SHA256 0091ea95ca4d07e6d8efe65d391509c3e8a8148a5525d0052b13f8d5e04b5c1f
MD5 3a48869a2f0eb382885a98ac5e4e100b
SHA1 f899f2b4b07d8cf45b54af3de63b7374af23dde5
SHA512 b6a031b8d901b480fcf1a970d403bcead8036ac8a04de9d75d81f756ad8a925fd88b73da446c7becf222f0b2e2efdf32e4cd5bdc4792ec8d110eba1583eb2df1
SSDEEP 48:TaFI/Esgnr+AiCZzkH96ltr+L7PrP+7vm6prQAVWx2LfCAtd+STePY7:2oQiA296ltiLfMppFVWWCsd7
TLSH
T1A853DCDEFF197321CAE601B7E2C106312CBD1F5D474776C07BE900E2A68B602543D85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 cc8d6c912f73469c9b5d7a2b4a468f72c9bd6c99804aa86c4af984cb859d7564
MD5 84e4e55f3aac7202f6b32f509bf845be
SHA1 2341c9b8c81e073ca5fa008bf58c9f93888f9dc7
SHA512 b78e74881f05e093765e2b52d5afb587700afe789c8e5cd829df351c1aad6a4b7161acfb76ec2a4b26629095952854cd91cd61dd3469f33df112e37de55ace27
TLSH
T10521B800949ECAF707355367223F8DDCE060A86C6F5BAB447362DD0A9096D3FB8D3292
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 b60dbfab06e2101210d0a3f2f8168fc08bc4a35f7c33a0ec26695ecd8a0651a1
MD5 4209db046bdca4223a1070e654adf547
SHA1 91c46bb4bff2644d74d17c046a006d21bb14c035
SHA512 4551d7941d9bbfc46d2fa558ce8bde551b723f6e0d94c2f803a43765cebf15cd9ace34ce05c8ef3dec1649b8e1e96a86ad9ad9d308c6c1fe92b5842a474d4bda
TLSH
T17931CA00858DCAF706715327223F4D98E060A46C6F5BDB483367DD1A9096D3FB893291
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 855156316570943417ced79adf6b591a3d6b1d67942328cb0b04aeb03672b403
MD5 27306f7773f9a0b8c902e469dc208379
SHA1 8f3e02822b35da4b8bcf2f9da22a83027f73ea08
SHA512 4844c856c9d1b463da07767d2b0d8eb811f7a96a955266ec4f3b78af60ad2e02ad105e8e7b1e7569bcf3ddf287f2bf688b2381a17c63765b070476a30af3b6c2
TLSH
T1AD419900959C8AF70675532B223F4DD8E160A4AC6B5BDB487373DD0A9096D3FB8972A2
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 409B
SHA256 781ab1f13576949864a58ce0f704145735e549d2a6fee18aee5799ed54fe9243
MD5 e76a567dfe305e9d72b03be86a1ba1ea
SHA1 f8a789c6d6b9253c8d6eefc021a0516d2c8a9fd7
SHA512 a7f509a4eaa8008e833f7339dc06ac713c2dbc732b5e2bd76edc8a37b7c84cbaab2fa63b6d3a0ea1e57bfbc53db5a2abf0b28eb9e5139112cbb3daeb5e399ffe
TLSH
T145E06150A01D8FB747741357333E4FEC956164F8135796A83390DD0B6186D7FA8A7291
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 7b1d11fc9b052eee19758d05c64ff2fd9ffd2d36a93e1c33505664fac5e4c7d9
MD5 8901ea1cca2c64e6562879ba4c3efba1
SHA1 9eed4e78512542dbf7c39c5fb0549aa5e9928407
SHA512 5405acf3c197483614cb12f2f04aaac622658754878ea72add765fb271465843e79f586ea6e68acf5a68cdcccc41142231333ee1adab6bffeffedfd23a8220f0
TLSH
T17B419B00558C8AF74775432B633F4DD8E160A4AC6B6BEA883363DD199097D3FBCA7252
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 e9cb88af6ad6e142acb3eb4b69b8aeeb0ba8e58cf21a1859984c74dee5a98aa6
MD5 fe98775d0638607783e44d32e29b191c
SHA1 c65afccdaedb646e36508606e0089aa68150c7fe
SHA512 f414a3bf40f1f98f85049a809886f85d4be737ea994a22e7dcd02b94be2129b7faa8d2363dbb28ebcdb2c46accca37338255aa40a6e7c47c751e1124b7c99a6f
TLSH
T1DA51DC00558C8AF74675032B233F4DD8E160A4ACAB6BDA883323EC099087D3FBC96252
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 126999007bdb70d1804985c9595fd078bb300a22555d74307790dcf2a9b35516
MD5 22061e4d732e3c63fa7c2a69b3f0dab1
SHA1 efcdba9c35a012ec1ef775c19f2f120a14cde798
SHA512 ba8076cc6e4f57d78e4c657eb65645246258ea5ffc2d49b207e144b964f9a7d1b1707c71d39e83ee356e2735c3ba0b53dcc050affd163feb1937ba31d765a81c
TLSH
T11E51CF00559C85F74B35432B673F4DD8F120A4AC9B6AEE883323DC099093D3FBD96252
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 64f78f83ef16c6038c8be63a153bb52befefee9dbf7f943c185c4f8d75de941c
MD5 5a65c88a9562605fa0216955cf05e8e5
SHA1 86f9a319607334d309c630666ef71685e9fd4403
SHA512 53bf9782ecbc29a7ac6a627760d3e89ccb9ed9facb4e8c5d892d4e9b35f9128a4ab9c25137f283847026022be742eb1fe7385c9e0b5bef9f28960fe2a69993dd
TLSH
T1FE61AD00659C85F74671032B673F4ED8F620B4A89B6BDE887363DC099097C3FBD56262
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 856B
SHA256 db07e9b3c67f6c65634b673ae91ce8dd51fa5eb64d165913cace40a5e2aa0d0a
MD5 0453b8aa87e12f6528b286927831956f
SHA1 bcd3e8744ee042e0d68c48f85651caca3d062ab4
SHA512 c790862d2c20e2f0994799d400bd8c72c79ab6124e5ac973aa60361327636a9b9215e0fff593c251a6e1c6baae962c24669d347b50b02dd39b78545f53e775c6
TLSH
T1FD118800A48DCAB703755367223F4DDCE46068AC6B5BAB483361DD0A6196D7FB893291
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 bae70d041c25533390018c1e94bf3436bd862b10eeb12836cc980ff138a5fe63
MD5 b7609710c75186a072862476e5d64ddf
SHA1 97009ee21e65a463c5ec68e30677ce498bdb6093
SHA512 5c83e9a0a90a745d26f92f59691cf043cd8c0c2015a7f9f442e35c2a3b591815c1545e8b54cceaa1175681499e59f0f163f6a4a0fc2c15bbd730307c6ccea711
SSDEEP 96:ocGsOcsIsvbPcsUqVLiHJ1smSTsn3oBNy8sX6pfWurBu:hOXzLKOgIY3yWN
TLSH
T1F781DD00668C85F747710627677F4ED8B661B0ACAB6BEEC83363DC199097C3B7C56262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 47135b0d25b78605863215face1534fee1b5c9ed803b10cccb696f3017a29e97
MD5 b1900fe044b14858990c901234c85dcf
SHA1 b56420ac8b0a76e88d8766281b9eb9e98c0258a8
SHA512 73d6c946267e0d08ae6b757c8d58328c0c56c9ab1a0019dd7670969aa95e3dbf3842cb74aaf6f69ee009d29b85a420f397ed3999ce577e6a25d376abb97ab58f
TLSH
T11BB09252E2AE4AF8C46A11E211ABA946C29EA18FD99157117E04C4008A5B866E7C710E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 297cebd71cc428cccd2a63c53d3cf523588641c5076ba026d4b49f95a8489e32
MD5 c1b7476780f8c1db2acc180105e2626f
SHA1 c343b65e9393eb5bd2532b0d0aa44e60dce047ee
SHA512 27e26354ed20b81c143cf24749efc21838f089f598a979c7606dd82e304b0136ff7f4e61f28e15a52b58885dadb3c0e13344d10b68086fc18ee703a92806ac75
TLSH
T182B02202E2AF0AB8C0AA00E200ABA802C28EE08FCCA203002800C0008A0B822E2C308E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 db9e5204d9ad6a98c61621c34fe63cc9e1676403ad598dbc7e0f86b334f587f1
MD5 f843697858452fbb9c78569470ae05ab
SHA1 d16af67fd3d913b48e27af98fbf455e0866dc417
SHA512 204dcdb7df5770a2e711f1dd870f91076cb52e0683140919647189428c2641cb00f95e977938f83ee4ee694dee296475179f645cfc42f7411c51246cca318555
TLSH
T19EB09222E6AF4AB8C4AA11E251ABA956E29EA09FD99247516904C400895B826E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 176de3bb7edc6f711b5bd1b5e114360e6d1db8301b73b7686b416908fe300220
MD5 c6e25fa428895c4cede79bbafaef7c98
SHA1 c4eb108bd44f3d0698a26a6067f3276a5ad1cc22
SHA512 8550af689dfa34b93e9f12c28ce138acb205ab63b28f674dc20ee43807cc75e335159b41b93b1730b42f60af725b0ed4614f9ae35fb06886451da42607dbfee5
TLSH
T1C2B09212E2AE4ABC846A21E352ABA95AC69EA08FED914711A904C400895B826E2C714E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 45621e1c110390f5a708a2c3c86f4bfe64b6c8408d802919337c2b36c8779b9e
MD5 9666e73518ccf3f3e587d65f6e433755
SHA1 13e88543618792b93c9c4a2b70c909c2d1ea7345
SHA512 5c41e2867cbc0f381bacaff9cdf5661b5b14a0f17ffec79ab3a3e97f33465ab7f82430a24f7a9a91deaa40a5365a71dce1e85e674cb50e444b2bf0f7dde70916
TLSH
T121B09212E2AE5AF994AE21E252ABA956C29EA08FD99147516904C600895B826E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3305c848ef1ee749b037b67fea9064c6598b1787cedb34315fe63e94030e95d5
MD5 b42933d6e39205d7af64c25307649aa4
SHA1 c1b046ded46bb48c59b3761b6eb08d793ac00441
SHA512 cb6fff784065ec6ee393774eff7391de268069e09c69480e1b3a7a07e91ba30cf4d01a313c2e2f7992b90b3cddd2e3470684d17dabd21a7d100f509b5b56ce01
TLSH
T12CB09B11D26E49F9845911D2519B6555C25D504FD99147116945C500895B415E1C314D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d5cc7c41294d9d3aa6ec63d34a5517126dd20dd392a4aeea4c99ccf59b151bab
MD5 e3bd87acdf4cb024978609aaf1600e69
SHA1 dce9185a110dfed0328564caa94cc8101eccd5c4
SHA512 843fd604136370e62eaf80b340363e94c4e411d6c025ada63fc8d7dcd8143f295c691208e377abca7db5cbce48c3bb07f584ec669916869bdd488670ffd6b0ec
TLSH
T17AB09B51D25F49B8C45911D251AF6555C25D506FD95187116D14C5008557415E1C315D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 639d8e87e13cb04d1b61a419ed5d2388bbc0c623737087e26d52fd6a6f28c5d9
MD5 f355feca04fd68c15ab14f9a0b454b58
SHA1 b1700a07434b85b4483d5268dcf9c27a02b29592
SHA512 bacf52d12fee88f070f34b864765131d11427d3e2c9c9cb8507939b39690e9ade2a4ecaeca052160d7f2980444f7c9c9d4514b0d4b4c44f9fca301c54dcc9f27
TLSH
T136B09212E2AE4AF8846E61E351ABA956C29EA48FD99147116904C900895B82AE2C354E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c178ddad650104a2630e7747a7f064d4b2f4fff7edbf7c3de42ff7d340f0a87f
MD5 bd2b767238999e517fa52f26a6c84e21
SHA1 d6f7d53eda7157ab73e112a4e2968f91dd477938
SHA512 78eb384f172b8fbb814ae5bba93f607ebbb645fff36a238ab6e8a1fe0171d651654e2426c1d873236b382158ac916cc0d401bf6bda3bf250fa650439a969a4a5
TLSH
T184B09212E2AE4AB8986A11E252ABA956CA9EA18FDD9147216904C400895B826E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 df54d3ae7455e11f491340b5c71305943be068621a97c9c7c6bcde29797babc2
MD5 0b410e9049e7d1edad3115a8b76a6d6e
SHA1 57557c4f5afefba5885adb778fc5fc1d25f7aef7
SHA512 40ecd6cb4ee25c6af3feb26de43b1af8b79b7e07ed0b5f6a0c48293ce922f43304e3f11367d564d9f38abbcb19e699b4a62eeb730ba023950230bc111e7dc22a
TLSH
T1BAB09212E2AE4ABCC86A15E351ABA95AC69EA08FED9147216904C400895B86AE2C315E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 16a25afa1ebdf39788290111d65ebe60eade6da2440fe53df01ec4cf0074b335
MD5 9ee45b2289cf563aec7aa095aeb91b78
SHA1 c4e8ab6a7766040fe7d8e74c68ed3090cbf3b96f
SHA512 715f499d31e0d1b487fcfa6a1a2cf5d2565bb842351bf2001562eb05efd2ebe7cca052d5afda39eded418bc15ba13159d389b37a95c6fb507be5c9d8ba398ace
TLSH
T108B02202E2AE0AF8802A00E200ABA802C28EA08FCC8003002800C0008A8B822E2C308E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9be5e1b4c4183fbfa68f4deb572ae8c7b1d6c076498452b384a14883972e08cd
MD5 452b8558e125bc3e0183f42584f85ef3
SHA1 d9d9dea6019b91b32ebf0970fb2472a106dc4e6f
SHA512 98ad4fdff775c514dca0eb8898682c565e0a6c08de2f9147d70cd035efa9c1e066a88a3a5667523770483fd61754785282533f2e4246cb32b5786153ec29883a
TLSH
T123B09212E2AE4AFC846A15E251ABAA5AC69EA18FED9187156904C400899B826E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1e5f7d99862531b85a0dc4ae2e67efab23276cd3a0d9d905cf954b77e623a58e
MD5 a347d792e1e600b361c7d296bd9e49fc
SHA1 5e968ff27041df38e959f42fa41100fa6b23c9fd
SHA512 1f1021aad3cad9be44f60727c1ce1a32ced6a96b4b9c5ac5782d51b00877d9fe0156c5ab5a6ef2ce108eec77b118c245b80d55c871b3b2de84996c36fc7559d2
TLSH
T118B09B11D25F4DB8845B51D2119B5545C25D505FDD9247117904C4008957415D1C310D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 dd6d9f4585106eaab7abef578239e8bb9a6173ac786e3b204670952139557ed1
MD5 a855b79d1664f0dea90d6a06d6c1321c
SHA1 c9adb649126d365a036dca6209327b6616a72918
SHA512 b7e2eb9d4bdb0f70e562981c4cabc9831e792046393694febd9df0edb8cd515b219efafe5876332dd964a6313c963b762887d21653191215f0e35e2142102022
TLSH
T12AB09B11D25E49B8845A11E2119B9545C29E505FDD5147116904C4008957425D2C310D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4685d36dca75196b6aaeec7bec75084560a55c85cbe0316ef7da015b4072a7d4
MD5 f20439548ac39981142ebc2e897a7873
SHA1 160e89280550687b9059c6724c712a6dc4bb2a61
SHA512 fb05e29a7b007b575b877ef0a6bdf1d810cb2e0dea18ef8667bc21dfa0c79dd6d4528cda0d046c15ef8cc871be19079df0b50efd5fb0f17f8d10c462281454c9
TLSH
T1D1B09B11D25E49B8845E91D2119B5545C25D504FDD5147116905C5008557415D1C310D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e183b66e20c767437342741adf0346e5b15eaccd66f482c8e568590f214734d6
MD5 5f168d36c86f38f6081b425163a6bdac
SHA1 577f6a87b92a6ea640988d3d41f704ce4c4388c1
SHA512 9d9fc065397109ab7ccb5ece6d6f2b23b4748fab871795075ca32e3921c0f6bd3b50f98859b52c4755fcaffbae50c390f9c379b6e21cd3249ffd0c5a743b87e7
TLSH
T12EB09212E2AF4AB8846A11E211ABA946C29EA08FDD9287116905C800896B826E2C310E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b71ab0f5ae60fc51f47252edb426eb90a48d904c58a443cf35d62f9a9685336b
MD5 66ae594d3419516d06cb8399cdad56fa
SHA1 b82779b2902e7009e43a7f6d414db9193494ae40
SHA512 a20a43a0d4933328523cc3b7d6ca9c110743042540b023cd598e51452f4d9dbefcb82ddc0ae9b14d289c3c03aadcd1f5268297c41e6fda74e5769716ddd96d33
TLSH
T1C1B09B51D25E49BC845A51D2119B5945C25E504FED5147516904C4408557455D2C314D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2bc2d5203e0d3d5de35658c1d93e9d46eb6ebef831f4441467692c83c6b533c6
MD5 1044fe81f351c79921738f3e2ddb6f7d
SHA1 ee5e6110992b74171332923efd57db8ce07d62b1
SHA512 f0cec23521ea65aa77d52c7dbb32997d49cd214adfaa90d7cf6f58629404d8a3e7849a20ec0b0cf64a8f82fa208f3eff12cfd8c5d0e4e517a37f8e6dae244a28
TLSH
T190B09252E2AE4AB8846A11E211ABA946C29FA08FED914B116944C800C9AB866E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3f91a32289ee2f9fe76e21ca3ad405350b340f2392e0141504db2be1636c3e9e
MD5 8feef2223ece7092d030124231bf4875
SHA1 fe0553f0adea5ec6138c35d66ad085f275301890
SHA512 6450d543a4c75e14d3cba9245a533cb0f7ee1f23856842390275566f67fbf1c996c822b8af362f827acc49232420c8959a7c0e676b7aef877a85e29d751bc075
TLSH
T120B09B12D35E49B8845911D2519B9956C25E504FD95147116A04C440855B455E2C354D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 74593882411fc792118e7b5c377d5b87625b89ef0a5b05ba44a8759601883fde
MD5 2ef59fd4594c790194cf4675bb51afbe
SHA1 fc1e5ce6b3fbbe450c7b7bdf357a7fbf4f8e142e
SHA512 cc92cb63ecd6cec9c1c5ba697125b2b98cbbc1a62cd04d8d4ec859723aaf633acaf136fe523210155566cd579fb2f9af7489afa7691d31f6c1ec2fab78becb0f
TLSH
T12CB01212E22F8EF9806825F252AFBAE2D25D50CFDF9387107D05C4408417826D5C310E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 290e743911ae6e65e0e8c43e46117cb6d184d79f28ff169efa2f955ba179e51a
MD5 877bc3788f8e44619a359bfedd73371a
SHA1 604c7dbf765726f1119b10ea38ee0264cb93da6e
SHA512 27b2d3aee07f17515df2a7e86e5365e910c22196dae326c21e8656e63d7592f0441ad8ef800a94ec835a306dd3280c3bd876d10ce8a770856e7c0a2a87ef74e9
TLSH
T169B09252E2AF4AF8886A21E221ABAA46C29EA08FD99157117D05C400896B826E2C711E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 00418f1f5fb955dd752ebb986eb13dbfbd3a445bd1660971dbe913c70f2461c9
MD5 d0beaf4389dd62bd35df95a35a4437c0
SHA1 451191e4cd55203f9721f2f5336366264d7ae114
SHA512 dad6b60902472cf2bb6c9ea51c150d615a83d0b456e2f4982449fd3e478b32f09f9a2226771ca64e01f9b197960485f98fe9b4a6b310819c258d1a040f38a938
TLSH
T10EB09B11D25E59B8845911D251DB5556C25D744FD95147116D04C5008557415D1C315D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 384ffe13ef074f933b37a06f7dbbb174e62baed5ba8746fa09c126c85de7ff0e
MD5 8298483e7965d74c91ecb4addb6cc67a
SHA1 2787112d5d4b3847e27a777f5c9da314e64ad661
SHA512 3ddf58aa5f4f99214f94f207b350feb5201f13bbdc8695558b3109716bf5d7a242699cf7638b3a77b0d0b1aa63b51615089c0bcae8d9f0ed9b69dc7c278eaa69
TLSH
T1A8B02202E2AE0AB8802A00E200AFAA02C2AEA0AFC88083002800C000880B822E2C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a3286307939640be308c2150f00ea6d12a9281d83e670d55a6146d5aecc6dc63
MD5 247f5f8c88d418efa1c85d0e442db2bc
SHA1 9481ec1086c03af2cb7f3bb128bc35e6c4e6ce00
SHA512 026b7b3e36657ad5c1a269937240dd8d39d9eb14db4f856ee05f5dc1f6182615e27f3a2b373417fbbfd784739564a7d869e3b586b988f74ca77f34415369f6bf
TLSH
T10CB09212E2AF4AB8846A11E251ABA956C29EA18FD99247116905C5008A6B966E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 abffdb1e296dc866a47fb67ec5d51327ebdccfbf5249b7b6195904e405fb4b71
MD5 212d5eeb3158a150eeddbfd4c7148ba8
SHA1 4bc20322adbe7f9928e71c5e45862504908a8969
SHA512 8641054463710e43792847db4f38c15e9aa1874802de93290d9925154ee16d9c8462be87330b4ed6dee04f661f579ad6912e10d510404995a7f01ac513296e61
TLSH
T1BEB02202E3AE0AB880AE00E200ABAC02C28EA08FC88003002800C000880B822E2C300E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f418419e5774a09034c9f5c46bcfb4f4bc59f811fef7771cc75f5658ce8f77ec
MD5 b9f836514926a516d208c5ce6cb2102b
SHA1 d296b4f64e550c223859c3046fd6a642e7065e1b
SHA512 0b80a07742ca834e5c74ac71f4d8bc33f9070eef91cf452248dba85a2ba657aefbdc80d93191f433406f5a72a1d2990a98e38136ff0f79fb26b8ba1f3cdf7c8f
TLSH
T130B09B11D25E59B9845911D2519B5555C25D504FD95247116904C4008557425E1C354D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5d0fcb2c6e1b3b4ec9f45c2c8887c6ece4ddb87c7f144bb7d5c1431f1840ee11
MD5 f46642c467a4c72e4302ecad374a4a76
SHA1 c4d78ca625b597f4f4ba621e2b01c2b12ffb2dd4
SHA512 e8868067b6a48afc91b6cdd72e201fe9583e5a784539f3460eb60bd24ebd528e8289f63d6508d21c29e0be6ad337445d5424157b8c044e3b814b134ad4b547af
TLSH
T1BEB09212E2AE4AB884AA11E251ABA956D29EA08FD99147116914C800896B866E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9c9194cd530874ca1ec4353767d793a738d06780deb5b880920a5538518d4a8b
MD5 ea24dfdfe6ca5a2366ba6d9bb2636356
SHA1 5b249fb9d9b0b45081a3f82ca76c5f65233c069c
SHA512 037b878def6024387717b19653205ce78b5c6de69ff813238f1dbe2e0c985dd2c7e1c4cb0bd159edf97aaeeffa1962ddefc9ec5ff3b98f3f0579a2dec4db6f37
TLSH
T1E9B09212E2AE5EB8846E91E251ABA956C29EA08FD9A147116A04C900895B826E2C314E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f188196139feaa43dac281a965e04b44f3dd0dbca382b4fcccb5c29f31068a24
MD5 5d775a4f8b4991133253c85b5c1b1abd
SHA1 c305c5aee8d78e5a52f7b8586ad7111e6a279731
SHA512 cab051035897738722b1a3de2c88bc5efca4de8384fe6a04feb8210c369bf9837b47cf78a85a9631874376be346473ea1696b651cd5a8d0dee514c2d3d6a335c
TLSH
T16EB02B11D25F49B8805900D2019B6411C24D704FC84003002800C0008407811E1C301D
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 10.2MB
SHA256 27f9715e50f7e0c75597ac054dac4e367ec3dab34beee325786f712896e730dc
MD5 e7fba385298c6a09de2ed36dee523d17
SHA1 bf24eb9d50ae1f9da179150113ee3c0135fc3c55
SHA512 6a5113ce01d1b4e01c83efeb04fed9e1b50f589128b30b76a4c1777f13c60bf5903ee5dae90c4cd011828c39cd19098cc8219aa0a4368cca745b1432b06274c9
SSDEEP 98304:/H9DGHU7dlw9Ahji5c4LZa/AFptlYsQBOqUk+Wtzv8bTahPaxp81:fFGLR9QggtzUbOExq1
TLSH
T147B65B02BA6F54ECD59BC47483068A239E2174DB0B36BAEF418446393F6ABF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads