Analysis
- max time kernel
299s - max time network
312s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
08/08/2026, 21:53
General
- Target WatchGoParty.exe
- Size 171.9MB
- Sample260808-1rnr4sfe73
- SHA256 97df026430ec48ce52707298c6d2f9e821ddf35b407dabe9bb39ff3a0483c83a
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WatchGoParty.exe"C:\Users\Admin\AppData\Local\Temp\WatchGoParty.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\WatchGoParty.exe"C:\Users\Admin\AppData\Local\Temp\WatchGoParty.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\WatchGoParty" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1636,i,5371770401315053469,13911415192461332061,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1628 /prefetch:22⤵
-
-
C:\Users\Admin\AppData\Local\Temp\resources\java\jre\bin\javaw.exeC:\Users\Admin\AppData\Local\Temp\resources\java\jre\bin\javaw.exe --enable-native-access=ALL-UNNAMED -Djava.awt.headless=false --add-opens java.base/java.lang=ALL-UNNAMED -cp C:\Users\Admin\AppData\Local\Temp\resources\java\f8a1bbda3b15.jar V ira-b7cbae30::default2⤵
- Loads dropped DLL
- Checks processor information in registry
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
jna14392551979654080851.dll
memory/4432-91-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-92-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-94-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-96-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-97-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-98-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-103-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-109-0x00000199E9C90000-0x00000199EAA32000-memory.dmp
memory/4432-114-0x00000199E9C90000-0x00000199EAA32000-memory.dmp