Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3whirlpool.zip
windows7-x64
1whirlpool.zip
windows10-2004-x64
1whirlpool/...er.pdf
windows7-x64
1whirlpool/...er.pdf
windows10-2004-x64
1whirlpool/...er.tex
windows7-x64
3whirlpool/...er.tex
windows10-2004-x64
3whirlpool/...ol.pdf
windows7-x64
1whirlpool/...ol.pdf
windows10-2004-x64
1whirlpool/...rs.txt
windows7-x64
1whirlpool/...rs.txt
windows10-2004-x64
1whirlpool/...nt.pdf
windows7-x64
1whirlpool/...nt.pdf
windows10-2004-x64
1whirlpool/...nt.tex
windows7-x64
3whirlpool/...nt.tex
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
15/08/2023, 18:09
Behavioral task
behavioral1
Sample
whirlpool.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
whirlpool.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
whirlpool/A/Whirlpool-cover.pdf
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
whirlpool/A/Whirlpool-cover.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
whirlpool/A/Whirlpool-cover.tex
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
whirlpool/A/Whirlpool-cover.tex
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
whirlpool/B/Whirlpool.pdf
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
whirlpool/B/Whirlpool.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
whirlpool/C/whirlpool-test-vectors.txt
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
whirlpool/C/whirlpool-test-vectors.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
whirlpool/D/Whirlpool-ip-statement.pdf
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
whirlpool/D/Whirlpool-ip-statement.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
whirlpool/D/Whirlpool-ip-statement.tex
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
whirlpool/D/Whirlpool-ip-statement.tex
Resource
win10v2004-20230703-en
General
-
Target
whirlpool/B/Whirlpool.pdf
-
Size
252KB
-
MD5
65f37cb455168cfacfb892963afb9abd
-
SHA1
056e05961fd09dcba8e335514da198ef96307e81
-
SHA256
8cd3344150b76f5353ef53b5cddbe2de91252450647a1079aa97439ac821b97c
-
SHA512
89c3eea0fc03c84ed584f72b99605760cacb6f184edabb5f38dceeafcaa48949a233dd6e808d69f89ff7165b0e8b42a3d974cc660a966c430537c549eb80c50b
-
SSDEEP
3072:7tabumKxrGaSiI0KbjxRwCxcnIRGWYpJuya3naxtHLVD0F0lJevRY47ENz:QuBSi69RxcnqGTmxa3HS2JIRNENz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2104 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2104 AcroRd32.exe 2104 AcroRd32.exe 2104 AcroRd32.exe 2104 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f8474a899e41b35184319e3c66e9c3a6
SHA1560eab3072f9ea591847b0b0b0316fcc884b4b29
SHA2560e288466982710e0bf197af20d1b2427739ce804726cf918509633723dcb980f
SHA512a1499469df142bda21507b4ae9ecb05ff0e718cf5a35b3648684de6ff6299a2d8da237ea7f39f704b2ffe030f3b14072a2880936bbd95d5501dab69b40833717