Overview
overview
10Static
static
10Install.lnk
windows7_x64
3Install.lnk
windows10-2004_x64
3Bloom/Bloom.exe
windows7_x64
7Bloom/Bloom.exe
windows10-2004_x64
7Bloom/d3dc...47.dll
windows7_x64
3Bloom/d3dc...47.dll
windows10-2004_x64
1Bloom/ffmpeg.dll
windows7_x64
1Bloom/ffmpeg.dll
windows10-2004_x64
1Bloom/libEGL.dll
windows7_x64
1Bloom/libEGL.dll
windows10-2004_x64
1Bloom/libGLESv2.dll
windows7_x64
3Bloom/libGLESv2.dll
windows10-2004_x64
3Bloom/node.dll
windows7_x64
1Bloom/node.dll
windows10-2004_x64
1Bloom/nw.dll
windows7_x64
3Bloom/nw.dll
windows10-2004_x64
3Bloom/nw_elf.dll
windows7_x64
1Bloom/nw_elf.dll
windows10-2004_x64
1resources.bat
windows7_x64
6resources.bat
windows10-2004_x64
10Analysis
-
max time kernel
4294360s -
max time network
318s -
platform
windows7_x64 -
resource
win7-20220311-en -
submitted
22-03-2022 15:39
Static task
static1
Behavioral task
behavioral1
Sample
Install.lnk
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
Install.lnk
Resource
win10v2004-20220310-en
Behavioral task
behavioral3
Sample
Bloom/Bloom.exe
Resource
win7-20220311-en
Behavioral task
behavioral4
Sample
Bloom/Bloom.exe
Resource
win10v2004-20220310-en
Behavioral task
behavioral5
Sample
Bloom/d3dcompiler_47.dll
Resource
win7-20220311-en
Behavioral task
behavioral6
Sample
Bloom/d3dcompiler_47.dll
Resource
win10v2004-en-20220113
Behavioral task
behavioral7
Sample
Bloom/ffmpeg.dll
Resource
win7-20220310-en
Behavioral task
behavioral8
Sample
Bloom/ffmpeg.dll
Resource
win10v2004-en-20220113
Behavioral task
behavioral9
Sample
Bloom/libEGL.dll
Resource
win7-20220310-en
Behavioral task
behavioral10
Sample
Bloom/libEGL.dll
Resource
win10v2004-en-20220113
Behavioral task
behavioral11
Sample
Bloom/libGLESv2.dll
Resource
win7-20220311-en
Behavioral task
behavioral12
Sample
Bloom/libGLESv2.dll
Resource
win10v2004-20220310-en
Behavioral task
behavioral13
Sample
Bloom/node.dll
Resource
win7-20220311-en
Behavioral task
behavioral14
Sample
Bloom/node.dll
Resource
win10v2004-20220310-en
Behavioral task
behavioral15
Sample
Bloom/nw.dll
Resource
win7-20220311-en
Behavioral task
behavioral16
Sample
Bloom/nw.dll
Resource
win10v2004-en-20220113
Behavioral task
behavioral17
Sample
Bloom/nw_elf.dll
Resource
win7-20220310-en
Behavioral task
behavioral18
Sample
Bloom/nw_elf.dll
Resource
win10v2004-en-20220113
Behavioral task
behavioral19
Sample
resources.bat
Resource
win7-20220310-en
Behavioral task
behavioral20
Sample
resources.bat
Resource
win10v2004-en-20220113
General
-
Target
Bloom/nw.dll
-
Size
135.1MB
-
MD5
3d2dadc029a8b5fc745a956c1a5ee568
-
SHA1
a353b0fec54f5c853109b175cea49893b72f539e
-
SHA256
b756c3f4de49600d23f369718cad7eb8645f7ada1dfafc71f47c18e3e2c5aadd
-
SHA512
c513823f9ffaaba52d90f0a7733274787cbc9f380b3670da145a96947b4e1f6a539393f29ee22b65432048b8e15bd4014b760ec73e4e63a7b80975706467a5b5
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2028 1352 WerFault.exe rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1352 wrote to memory of 2028 1352 rundll32.exe WerFault.exe PID 1352 wrote to memory of 2028 1352 rundll32.exe WerFault.exe PID 1352 wrote to memory of 2028 1352 rundll32.exe WerFault.exe