General
- Target WatchGoParty Setup.7z
- Size 139.3MB
- Sample260808-1rnr4sfe73
- SHA256 22be75d174a2694d4caee6991bd1cdafd22b0bb93207b8a6dfb9ea1685e485c5
- MD5 7aa7fefb806be3742d06cdda51230d4d
- SHA1 f0bd8ab8ae870c56546fbc6ffecfafd2d2808197
- SHA512 b73bb9b8938ec82851979e19f071f178a419c541e9479c45f42eddf4549de2abe158a0819cbb5de11c9f0bc20fe832e39afef39a1569ba3f032f09176f1d9e30
- SSDEEP 1572864:U3IuDlv7wsvYC7VQoYLIHPDqxbfxo4mxyMTLmvxjeGjI4OTiWc2yheaU/mekq0OH:U3cs1ShZse5W/+eBOe38b1/PSTgDm+q
- TLSH T12D68335473964CFCF73AA435A3624F21CA155392EB0E03CD925678AD93A17DB38360BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
WatchGoParty Setup.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
WatchGoParty.exe
Resource
win11-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target WatchGoParty Setup.exe
- Size 139.3MB
- SHA256 9f8ff1b3d4061e2487cf07b5b0c612c7a1b440701d70ff4d1f9d7f22c93bef7f
- MD5 137f9fde983d6bc7be5feec385549e25
- SHA1 71729e9c87b7aa0c72675b82986bb10bb6fd6f1a
- SHA512 5026257bb1e780ac4c6dc5df9109f034cfb26cbac7e7b4f919ca3d724d35985483bc1580a0b2e61960d6396a772d560c04be5b59bc55f29ec534e72cade07206
- SSDEEP 1572864:sFu/zs9o4lKlbJYdv34Kee9vASexMHcYHhKJZfeS5LzrIDUfKLUqp9/G0EjQCTiT:sFPl2ofnIsqKwg9ehjUrH05B7s1dpnJF
- TLSH T1B768336473964CFCF73AA43563624B618A195392EB0E03DD924578AD93B07DB3C360BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target WatchGoParty.exe
- Size 171.9MB
- SHA256 97df026430ec48ce52707298c6d2f9e821ddf35b407dabe9bb39ff3a0483c83a
- MD5 dd08133d429a9d11231b0f16412a35f1
- SHA1 9f07ade618f0cf0bc4a5cf448b77cd9f6c2f0765
- SHA512 228ac794bbf773872394da09544a05426d3423c26823a17cc7d845f5c26ff607d6e07516270d8bad8b11fd8924cb0ae9ca4c833f0c37add6ffb7832d76d6fd65
- SSDEEP 1572864:FasGSAvwGc3AWWR6cN2rxlMxg3fkRPgGFDyrakAcihuSrK6yj0Jip5hMj6xCL4N:d4fc/M+i6xCL
- TLSH T1FC888C03E29A51D9E01DE1B5978B9233EE71B8454B29B2DF275407522F7BEE42B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL