Extracted

• • Target
    Messager-Setup-1.2.3.exe
  • Size 20.5MB
  • SHA256 b44f26f52a460a90b881711ee5fd166c6339757efc5c6cbe35461f613ca44053
  • MD5 a70ad199c0fb6ce28de6baa30394d904
  • SHA1 88458709f9d9dc08b23448b4ef1f9da7768cee0a
  • SHA512 eaec690ce97ff552a3c9e65811ad3e76cdee64897f507f95eb37cef5bf9e05b21535eb6c27e017d11dd5bfde41c2919611269f2ef0185fa600b34b6600f778a8
  • SSDEEP 393216:9rk0L2l8HNjaOLmj77HGl13LMwBi0L5YtbxXL3E1EEOhgWqhQyR7VxUU/ATYuK19:201yj7Tq13L5i0L54bxDbEO6WqqkUBYl
  • TLSH
    T1832733ADF3E0F6BDEE6A28B02AF38D586A490D54491C0549BFB1358C184A5F5FD8B13C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discovery

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2
• • Target
    $PLUGINSDIR/System.dll
  • Size 12KB
  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
  • MD5 0d7ad4f45dc6f5aa87f606d0331c6901
  • SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
  • SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
  • SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
  • TLSH
    T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    $PLUGINSDIR/nsDialogs.dll
  • Size 9KB
  • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
  • MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
  • SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
  • SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
  • SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
  • TLSH
    T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    Qt6Core.dll
  • Size 10.8MB
  • SHA256 a0bf79817c19768c4b2bd01258d7d8d15818c0d3a56f86dd65d80354e749cc16
  • MD5 b35eae28381cc5be1c9031ea58780ede
  • SHA1 80180ef51b3ded1982342fef21f2669b7b969e56
  • SHA512 4f756e8a744bad4f6e5c29781128c9fbf45c83c921a12368c4df07029df6fb13d9746623e61a17bba5606bbd75ea3f2d51a258b8e49ac70ab927933e914a712e
  • SSDEEP 196608:XOvZZo3AnsT/tsXAmX5RWMAZXlRW89g9e4tkQ8NgTaveOC7mJeZn+WQknIot1JZs:XOvZZo3AnsT/tsXAmX5AMAZXlRW89g94
  • TLSH
    T100B65D03E7F71059E5FFD6309AB762726B327C4966346A2F0244B6351E32F606B36326
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral7behavioral8
• • Target
    Qt6Gui.dll
  • Size 11.0MB
  • SHA256 67d3fd988e45f4aa31b9fe0144434465fa87a23c27cc3d573257eb1c6c5df2e7
  • MD5 0c157ccfb52075a3fc2a45a946189e4e
  • SHA1 8a9304965dec7a3bf84b311cd8003ae7dbcc8186
  • SHA512 fb77c0aa34cbdd071c9c8375d1af3ee9d8bb2ae7bf31d41eb35f78bf72ac2eeb9f4f1a00e72b78776dd71c4c40e5e6e84c7d87d93278235c7fab0955b211d74b
  • SSDEEP 196608:XubEfIuPYl+1Qdb9AHsMo5xr6phloOL9sx1YEO6VW5HtZ0H29Hm9e3yjeh05AcBC:XuIAuPYl+16beHsMo5xr6phloOL9sx1M
  • TLSH
    T194C65B57E26260ECC06FC135436BE673B931785912347E6F5290CB392FA2E60637EB19
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral10behavioral9
• • Target
    Qt6LabsFolderListModel.dll
  • Size 137KB
  • SHA256 6b30a3655aedd7523bbe4c508363a6ea26a4a945af7920276d5075a2df5e110a
  • MD5 dc931123f6c5fd167f5b2aba8c1e1449
  • SHA1 cc50f0b76c79e59fb981959b13c262026551eaf3
  • SHA512 1e555354e5d63fbe3c9e9fa0fc12015a5237807a1795f77cd75732770757cc70aa2ed745c3ec86e68487e495c3c9dae8d11fd789f3ba8739196d405b8527189c
  • SSDEEP 3072:5RikF56keUepzr7cBl1NGRNKMHSmi/LnFJxRJptznyymoXT55/Zm:WSLwRNKMHSmCLH5LzyyjXT5/m
  • TLSH
    T1C3D3086BF25524FEC46EC278499BE732B83278C91376661F0254CA3A2F51E90777E348
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral11behavioral12
• • Target
    Qt6Network.dll
  • Size 1.9MB
  • SHA256 aa2322a989a52d205cff4da2b455962fc54373ae4dbd756ec8eb6fbb3d56cce8
  • MD5 b64478d476b72656671bd9fbdef5d018
  • SHA1 13f7f3e3c8b8593bdc24d6e584613bb1f3bce173
  • SHA512 d8bf83d04402e56268721603ccc24de6e84e273b7a07e113ae3db6f6e09df5c84cfbc1f52759a713b4802b9a495b924ed39e5f76e1c68e2afd764fbcda20ae95
  • SSDEEP 49152:gVP5vSTINFiJpzur3OXtddvvGBQE2lN3ke49LPgcyvHs5uB7dmLOO+2BFLHTSnQu:4I8biDdvvGBQE2l5ke49LPgcyvHs5uBt
  • TLSH
    T173951963F26220ECC46FC1758657A233F831785912787A6F5658CA363FA1E6063BE35C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral13behavioral14
• • Target
    Qt6OpenGL.dll
  • Size 592KB
  • SHA256 17cb3dc8bdff999cd557eb6a5119ed83cbbe52c48cd4c06f74fc5d02ce4c0646
  • MD5 95f4aa67b421e029fffaca651902fb56
  • SHA1 1fca6af57d492604532d15487cfdcaad463d9c77
  • SHA512 959e0216b9d05d41ddc5d62bdf5924286c41283138bccf9817ec1e7a9ef1e9aa0dd49cf489a088d88560bba081ebf2d7d24c617369f5b1ec0498e2a916f52d48
  • SSDEEP 12288:FTS0kg51hnQOb0Kv0eSNdNb/y4Vk6msiEV:dSJpKv0eSNdNb/y4Vkfsie
  • TLSH
    T165D44BD2E15279B8C85BD63A438BAA367631BC4402B0BB5BB10CD7362FE1E60137D759
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral15behavioral16
• • Target
    Qt6Qml.dll
  • Size 5.9MB
  • SHA256 d8480e1bc2d1e8b055935f11f76790509d8282902da3850474a249329f3e8f66
  • MD5 8bffd9ec8404541c9ddc90f13d9c341e
  • SHA1 c71d0e3759d6a7ba3341c45332203a4361a951c0
  • SHA512 1f8658aa2971ceb0651acffafdced04333156fff0a0a18a440da3eec006b5a85d7b7ce48c976dd216cc3a4e25481a5bdd078878dffaa5dec1bfb4cd93c9a0cad
  • SSDEEP 98304:e5svJ/tcycs43cZUUe4PPAkQaglG3Zafs4bIlpgoHdQzAjk1udGI64DMAC5gIa6i:pJa2EcZUUe4PPAkQaglG3Zafs4bIlpg4
  • TLSH
    T1C6563B57E26224ECC06FC139475BE233B932785916347E6B1358DA363FA2E60237D798
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral17behavioral18
• • Target
    Qt6QmlMeta.dll
  • Size 169KB
  • SHA256 39f0d39bc8a5feb95ab02ca8c72a9cb291950494f5ad4379ad600b1c73ba7aa8
  • MD5 7a4c6da4c612b9f6e6a4884bd560cb2f
  • SHA1 fc69c78aada2e98bccfa01fad1cfc815b86b0e0d
  • SHA512 8e0c63dee1841593cd76395d26e46719c87c4e934f82d67e9ce4cdb697ee3466359901cf82dd9fbfacacdc1bff2fd7bb68336b7a3de5ee01d102c8d1bc1e06fe
  • SSDEEP 3072:GtEdtqjSoWzrTcSRJBC5vhPsdbB0Y0bs8QT58IT3:Gt5JoIUdN4gT5t
  • TLSH
    T15004292BA16158EEC06FC1789687D772B8327CA41334BA6F1254CB372F90E6077B9359
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral19behavioral20
• • Target
    Qt6QmlModels.dll
  • Size 1.1MB
  • SHA256 ec98bbc2ee37ba1759e859b666c24ec8887cc4f6e52db1c86a0594558f950d12
  • MD5 2e1341fafefaae53974808ce7001d8d0
  • SHA1 b79b7b4ad761a1ff81105e6720c738ba5ad25bc4
  • SHA512 4a4d6a48a3927b7bdfaf4290a93e7b07c710e35eec1be26c3d6f00a4f08cc71c1c75b323f82f2e41e4bdc1144950fb47cbc31d2f268a760bbebf49d6504b6328
  • SSDEEP 24576:NY2FiuBJTqIiQkShec+IEItJVW4f018luWBaZ4dlpiKKiXJ2hmfOvhNXAradgWQk:WjYTCQkShec+IEItJVW4f018luWBaZ42
  • TLSH
    T141351867E36224ECC07FC139879BA233B871785902347E1B6554DA363FA3E60627E758
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral21behavioral22
• • Target
    Qt6QmlWorkerScript.dll
  • Size 86KB
  • SHA256 b658effa609aadac2f89a20c67dee49672ed6b6d39a286c8451206b0ffe636f4
  • MD5 7e48806150862f1fc86c9c7f63183aa7
  • SHA1 950bfe7023a3340b8a3449abc00df4c9d2de97d4
  • SHA512 fb9146e578e33f07a92037935a31a2e70f499b02bbb3c7223624f1484fa9081ae384cdda007a7870070a2985dfb26fc7253dac6cf6fa66f419d548b365720081
  • SSDEEP 1536:z3Bw4BgWegMuXIicRoddZMxDv+UHz0oCMKh5MU/0/aT5JUpa7uLla:LBwdgMQIJRCuxDv9TPs5MU/0/aT5Jgaj
  • TLSH
    T1DF834B2BB357589CC42BC43946FB9336EB3278651B30A78F5014CE362E61E543E7AA5C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral23behavioral24
• • Target
    Qt6Quick.dll
  • Size 7.1MB
  • SHA256 8d8cf6d7f4c7b0f99dd7d04da84cb9257fa5472966e0459d215eee57512f848e
  • MD5 914125bd5da4ee8bab7055291b315120
  • SHA1 a13e858b7b709f3193bba06b0580a32bff0f7f45
  • SHA512 1e1418ed83670cd61a0c4cb4353f06b972afcc83fe949901af6b0e7b66b737f53b2265dad605280345161fcf54304a64ede2be85042434317880591be9b59f55
  • SSDEEP 196608:U82ya4Kx1xk8VJI4Bssfiz1ug5WiVSOUL0UWRWyoOhSM6qspGBwGPBf0COlQrWSU:Q4Kx1O8VJI4Bssfiz1ug5WiVSOUL0UW6
  • TLSH
    T133764B57F2A224ACC46FC1349657EE33B831789412747A2B5664C6362FA2E7033BF764
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral25behavioral26
• • Target
    Qt6Quick3DUtils.dll
  • Size 504KB
  • SHA256 a51b2dd58d5df2243a2efe25883ef398ab205d061dc77322e81c8335b56cc69a
  • MD5 655ea382e7a67bcc59d28f7e72103b32
  • SHA1 11c508d9b925595df6f98b0a3a7e74bbbdc860a1
  • SHA512 4073cd1be2869b14cdb640d56cc1fafbf97cd08badb314132bc345d9ceaff47281394bcaff993faeb152fbde37bba75c59ecf6d97fb2000c04aec6b0fa6d23b4
  • SSDEEP 12288:wrteTgD0PhCcC8zCN5kzCqYEZRs5GBOx/MCgdOdVdWdSL:wrtWhfC8zCN5kzCqYEZRs5aOpMddOdV1
  • TLSH
    T1DEB43C93F2A661ECC02FC4349297F273F931781D16386A6B5390CA352FB1F5066AEB15
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral27behavioral28
• • Target
    Qt6QuickControls2.dll
  • Size 100KB
  • SHA256 6a2d275a7cd98ae1f141b006605b7812538b0894724cb174d2f301949f56f08e
  • MD5 a34b6ae01cad80654f62b798aa3afef1
  • SHA1 578e400564e88b8ff8320b546c9ae579f9299101
  • SHA512 a8c6780a280531d2221d5a8bfb39299b1f8b86db01120c751fcfa2ebeb954600b2e6b5fa441a5199c9ef5bbb44ecb10f530e0560124784dfdc048a7e5118021c
  • SSDEEP 1536:MAkJOVuAhiMmggR2Hh8d2F05Lar8pT5gDgkDf7u9:MAkyuCzW2Hh8I7rcT5g3fO
  • TLSH
    T1BCA30A2AF24560ADC02AC67885CE5733FA32B8851231AB1F4364C7797F90F64BE79758
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral29behavioral30
• • Target
    Qt6QuickControls2Basic.dll
  • Size 2.1MB
  • SHA256 2219a34fb0284281f5899854d6c9748f6f084c39101b33c0f90c4f86f834e41c
  • MD5 791673739de78ed6180ba75b5a5f8d32
  • SHA1 f41e019a0f9d5114bb70335765fca3df12fc479d
  • SHA512 f29b6be0272bed85ebae9b624c93a05c7eac8f2d11b92f5a5c17c9a93425b0fc272d3428e3f630c052ac539c656259214d2b550e8104fbc5f163a3a25d22ab70
  • SSDEEP 12288:cIXaEFCDuqEYqL3IoF3OgkWj/+vUPKpCcXzafUxZqLxTb2QoYP0:cIXDCC9t3Imxj/+vUPKpCcXzafnel
  • TLSH
    T140A5B637D3911398C06BE931C386E733A775B8185535B95FBA38CB3E1FA0E209679618
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral31behavioral32