General

  • Target

    3840x2970 DC Comics HD Wallpaper and Background.txt.iso

  • Size

    124.7MB

  • MD5

    cceab2697bd2b6bfc3e30dfda8ee22b8

  • SHA1

    9267c9acb320e4c28d8de6b1638f8459a5a57001

  • SHA256

    59821b8aabe5acc8b1eb91ed2de2cba91b05351c3d9e3bf52ba0ba786f359b87

  • SHA512

    8f6590698624a5aae32a43844d98d1fb745ae9c501a358615263df30b533031d829eed3168e3189447903154ad3dd6254469b16ca9631a1a456246b00609cfc8

Score
10/10

Malware Config

Signatures

  • PlugX Rat Payload 1 IoCs
  • Plugx family

Files

  • 3840x2970 DC Comics HD Wallpaper and Background.txt.iso
    .iso
  • Install.lnk
    .lnk
  • app.zip
    .zip
  • Bloom/Bloom.exe
    .exe windows x64

    d75a6917dd41b6164f0b6788ef978211


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/d3dcompiler_47.dll
    .dll windows x64

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/ffmpeg.dll
    .dll windows x64

    0eaa4fb68ca1c02091ee00c3c6316abd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/icudtl.dat
  • Bloom/imgs/icon.ico
  • Bloom/libEGL.dll
    .dll windows x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/libGLESv2.dll
    .dll windows x64

    c54faf0fba825e7f8ac6d2a8308136b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/locales/am.pak
  • Bloom/locales/ar.pak
  • Bloom/locales/bg.pak
  • Bloom/locales/bn.pak
  • Bloom/locales/ca.pak
  • Bloom/locales/cs.pak
  • Bloom/locales/da.pak
  • Bloom/locales/de.pak
  • Bloom/locales/el.pak
  • Bloom/locales/en-GB.pak
  • Bloom/locales/en-US.pak
  • Bloom/locales/es-419.pak
  • Bloom/locales/es.pak
  • Bloom/locales/et.pak
  • Bloom/locales/fa.pak
  • Bloom/locales/fi.pak
  • Bloom/locales/fil.pak
  • Bloom/locales/fr.pak
  • Bloom/locales/gu.pak
  • Bloom/locales/he.pak
  • Bloom/locales/hi.pak
  • Bloom/locales/hr.pak
  • Bloom/locales/hu.pak
  • Bloom/locales/id.pak
  • Bloom/locales/it.pak
  • Bloom/locales/ja.pak
  • Bloom/locales/kn.pak
  • Bloom/locales/ko.pak
  • Bloom/locales/lt.pak
  • Bloom/locales/lv.pak
  • Bloom/locales/ml.pak
  • Bloom/locales/mr.pak
  • Bloom/locales/ms.pak
  • Bloom/locales/nb.pak
  • Bloom/locales/nl.pak
  • Bloom/locales/pl.pak
  • Bloom/locales/pt-BR.pak
  • Bloom/locales/pt-PT.pak
  • Bloom/locales/ro.pak
  • Bloom/locales/ru.pak
  • Bloom/locales/sk.pak
  • Bloom/locales/sl.pak
  • Bloom/locales/sr.pak
  • Bloom/locales/sv.pak
  • Bloom/locales/sw.pak
  • Bloom/locales/ta.pak
  • Bloom/locales/te.pak
  • Bloom/locales/th.pak
  • Bloom/locales/tr.pak
  • Bloom/locales/uk.pak
  • Bloom/locales/vi.pak
  • Bloom/locales/zh-CN.pak
  • Bloom/locales/zh-TW.pak
  • Bloom/node.dll
    .dll windows x64

    5e43c6b73ff04afc5d7f0f6d4b0c08f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/nw.dll
    .dll windows x64

    02d57c47eb08850bbb7853ec0cabbc84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/nw_100_percent.pak
  • Bloom/nw_200_percent.pak
  • Bloom/nw_elf.dll
    .dll windows x64

    e0bcc9367a58d352b395cb784d55369c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bloom/resources.pak
  • Bloom/v8_context_snapshot.bin
  • icon.ico
  • resources.bat