Overview

overview

3

Static

static

3

River.rar

windows7-x64

3

River.rar

windows10-2004-x64

3

River/Fast...ox.dll

windows7-x64

1

River/Fast...ox.dll

windows10-2004-x64

1

River/ForlornApi.dll

windows7-x64

1

River/ForlornApi.dll

windows10-2004-x64

1

River/River.exe

windows7-x64

1

River/River.exe

windows10-2004-x64

1

River/bin/...ct.dll

windows7-x64

1

River/bin/...ct.dll

windows10-2004-x64

1

River/bin/...64.dll

windows7-x64

1

River/bin/...64.dll

windows10-2004-x64

1

River/bin/...64.dll

windows7-x64

1

River/bin/...64.dll

windows10-2004-x64

1

River/bin/xxhash.dll

windows7-x64

1

River/bin/xxhash.dll

windows10-2004-x64

1

River/bin/zstd.dll

windows7-x64

1

River/bin/zstd.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    River.rar

  • Size

    2.5MB

  • Sample

    240930-y4bbfaxekd

  • MD5

    7695c72e38f910151544fd751c92d17c

  • SHA1

    9a7cc26a27428e766131c443b080b5745c35b8b8

  • SHA256

    9cd2039ad4f39bf14b58ff8d860efbfa7522334eb820ad334ff896b54690dc44

  • SHA512

    ae9fc7e396650f699a7724d4ac15b1cf27ea425b82b09d9c7f1b02b138a2a5281720a2411be1d28dd97335e44ca3df5bc132bb40d5b567afce1f23635d3f72d8

  • SSDEEP

    49152:d8iepjYiiconcLKHB+EQMZCj0LGaIVupDMKnSrzYF+ccb8Ta9i93YQ2GJBTI:2pjYhncLKHPZCXVBrzYb0wa+YrAk

Score
3/10

Malware Config

Targets

    • Target

      River.rar

    • Size

      2.5MB

    • MD5

      7695c72e38f910151544fd751c92d17c

    • SHA1

      9a7cc26a27428e766131c443b080b5745c35b8b8

    • SHA256

      9cd2039ad4f39bf14b58ff8d860efbfa7522334eb820ad334ff896b54690dc44

    • SHA512

      ae9fc7e396650f699a7724d4ac15b1cf27ea425b82b09d9c7f1b02b138a2a5281720a2411be1d28dd97335e44ca3df5bc132bb40d5b567afce1f23635d3f72d8

    • SSDEEP

      49152:d8iepjYiiconcLKHB+EQMZCj0LGaIVupDMKnSrzYF+ccb8Ta9i93YQ2GJBTI:2pjYhncLKHPZCXVBrzYb0wa+YrAk

    Score
    3/10
    behavioral1behavioral2

    • Target

      River/FastColoredTextBox.dll

    • Size

      323KB

    • MD5

      8610f4d3cdc6cc50022feddced9fdaeb

    • SHA1

      4b60b87fd696b02d7fce38325c7adfc9e806f650

    • SHA256

      ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9

    • SHA512

      693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09

    • SSDEEP

      6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO

    Score
    1/10
    behavioral3behavioral4

    • Target

      River/ForlornApi.dll

    • Size

      12KB

    • MD5

      2b17ecb3ef57f712223685fc667e2ed5

    • SHA1

      f802322dfe8313a68eee6e014aa02a66d43e06ff

    • SHA256

      6cfdb21fd609af354f6928068e78e2fb6f0d99e504a5637008ccf271c9943cb4

    • SHA512

      6f931caff0aeb8e8648c7132605c321e0fac3a3b2018ceaeecee3ef47c0d458a2e8bcd8adfe4af88dd25a73c1eadba56d040cc22146380b2eefaa307c7b351f4

    • SSDEEP

      192:u6Maj8sEUfsrKrcU8rcJ3XWS2yGxeKRRyW5E4qxVqc9:uPantkWwU3eyGxeKR9qxVB9

    Score
    1/10
    behavioral5behavioral6

    • Target

      River/River.exe

    • Size

      71KB

    • MD5

      a202f8b1f844456c3876b75170289167

    • SHA1

      225fe52fcefa6aa6b5c4f65bf240b96871e25a68

    • SHA256

      a79b8b0b5776488b12616788d09abb34b26a5f1f10177173d7603c8fb06c7e53

    • SHA512

      3ac4df79ca09d30d2b702cbaf97d47d543320dddf0a41d878cde8788dbd634365262386ee8b4aa42587cdadeeb2cce5c65e48bbb5a748fc366cefb580bd628e2

    • SSDEEP

      384:1A4Gwqk6S6ObXamEZIN+sSQNItkf2zIpVI0vwlwq6umjuPiqEh1wgCCCCCue50:1/lN+s/j2Sf+L0

    Score
    1/10
    behavioral7behavioral8

    • Target

      River/bin/ForlornInject.dll

    • Size

      1.2MB

    • MD5

      e97a7728ed78bde52df1bdda95cdbed5

    • SHA1

      9822518a7110323b1b647d07ca65f4605b6e7743

    • SHA256

      ef4caa777591d81a1744eed4d50df64a46ec740171b12e94527d2bd882277e41

    • SHA512

      a2d47321baf2ddf4f1ed793488a2bdd14690df3fab446879ce7a0ecd7791a4a32154874cc07a0f37a531228abf566850ee3438dd3e20288a9917e97a762eeeab

    • SSDEEP

      24576:Jd7ySdWPcWSVPIs6tBnAsZrchN0XjGfnO:n7rWP3SVPSnAsQ0

    Score
    1/10
    behavioral10behavioral9

    • Target

      River/bin/libcrypto-3-x64.dll

    • Size

      4.5MB

    • MD5

      be0f6d1d60e149cedaca33a04963e05f

    • SHA1

      b686e1ed9ae47b8ae803a5d9e912b0e631bc4217

    • SHA256

      81a5fe6cd0ef5b083e5c4bdb6a40a30bfb1b0de15a9dfad459de2d6a36d94f86

    • SHA512

      7b39dd8c70286ec4fe61cb2c3c12062f2dcbdda607c2f14c4f983741026f6aa62b60f9e983204949395cc54b5ebf6426c0f8300e0e385c35c1f2f3847160d7ff

    • SSDEEP

      98304:5l+f+Kv6t8y37re39P6k1CPwDvt3uFGCC:/Cyt8yLre39yk1CPwDvt3uFGCC

    Score
    1/10
    behavioral11behavioral12

    • Target

      River/bin/libssl-3-x64.dll

    • Size

      802KB

    • MD5

      733e3b58ee1760a442fec4712848c3ad

    • SHA1

      529206caad19cce2424323bc29a9fb9a4bbd3e76

    • SHA256

      159198cb8e740f9ad5918b51503121fd1b7e70460f6a4f6a6aa27576bbfa31c7

    • SHA512

      10835ff09e35d8acb2739707219905b3ae2870af973d8f80040baeb732eb798fa93ef1bc599ad9898aff8e20ee21aa1f5e5e07340eda205aa938fc001cd83a88

    • SSDEEP

      12288:uDYDcpeu9jFBOBJfbudc68KqLie1+jKMwmUxlcdEVB3ks:usM9jFr8OeW5wmNdEVB3k

    Score
    1/10
    behavioral13behavioral14

    • Target

      River/bin/xxhash.dll

    • Size

      46KB

    • MD5

      70c514826d9428f184d27f0c8f397404

    • SHA1

      e6b0b1a396de9913004d9bcaa230972686416bb6

    • SHA256

      aff59e91d222b75b3e3ac789baba9e24eff99796261ae5e887ef9e3c28bb3d64

    • SHA512

      168c63cbb54865ca42a884fd974291bcadd9dd8cf8bc1980148214e84498af42a590cb3d3a394765ee0b7d2e337fab6e85ff4f85d9ced97b92b540152202a0a6

    • SSDEEP

      768:tziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3Q18swN1WQ8hi6U:tziR74kgDn2rDRuIrN5mAvgbTg18DN1z

    Score
    1/10
    behavioral15behavioral16

    • Target

      River/bin/zstd.dll

    • Size

      638KB

    • MD5

      5b96fb0d4e6453680da278f5b7e51a29

    • SHA1

      3c96a29248fa3644de2c653a5d97c1e21b13a769

    • SHA256

      1374391dafd6262795243a58f9fb234be859d940683fe756c64692ca807f0478

    • SHA512

      27d06b7182aa48a81cce18f8f7b1bee054f3a862ccebd77d273a67c6a15e5d0ef5ba8fd7430976f445eb8bff51d290f2bb50061ac7ef448255ba8a18b8baf193

    • SSDEEP

      6144:fbauYl+rrR8uT4uB5uWYfO16oMynnjDHMkYHbpk5tRCEybNFZemMBLx4uQ16aSG:fbauYGT5BYMxjDHMk0petRCEyb9emHO

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks