General

  • Target

    River.rar

  • Size

    2.5MB

  • MD5

    7695c72e38f910151544fd751c92d17c

  • SHA1

    9a7cc26a27428e766131c443b080b5745c35b8b8

  • SHA256

    9cd2039ad4f39bf14b58ff8d860efbfa7522334eb820ad334ff896b54690dc44

  • SHA512

    ae9fc7e396650f699a7724d4ac15b1cf27ea425b82b09d9c7f1b02b138a2a5281720a2411be1d28dd97335e44ca3df5bc132bb40d5b567afce1f23635d3f72d8

  • SSDEEP

    49152:d8iepjYiiconcLKHB+EQMZCj0LGaIVupDMKnSrzYF+ccb8Ta9i93YQ2GJBTI:2pjYhncLKHPZCXVBrzYb0wa+YrAk

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • River.rar
    .rar
  • River/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • River/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • River/River.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • River/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • River/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • River/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • River/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • River/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections