Analysis
- user interaction
yes - max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
27/07/2026, 01:24
General
- Target FIFA Mod Manager.exe
- Size 93.1MB
- Sample260727-bsfepatfpf
- SHA256 dc0ef0c4bf740fbb4517c09baa3c8e93741b6afaad7f7a176208a16f1c05ce7c
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Modifies registry class 20 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FIFA Mod Manager.exe"C:\Users\Admin\AppData\Local\Temp\FIFA Mod Manager.exe"1⤵
- Loads dropped DLL
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/4792-158-0x000001734FE90000-0x0000017350060000-memory.dmp
memory/4792-189-0x0000017354270000-0x0000017354440000-memory.dmp
memory/4792-35-0x0000017348E60000-0x0000017348EB0000-memory.dmp
memory/4792-31-0x0000017346F60000-0x0000017346FA0000-memory.dmp
memory/4792-27-0x0000016B31990000-0x0000016B319E0000-memory.dmp
memory/4792-59-0x0000017349060000-0x0000017349080000-memory.dmp
memory/4792-55-0x0000017348ED0000-0x0000017348EF0000-memory.dmp
memory/4792-51-0x0000017348EB0000-0x0000017348EC0000-memory.dmp
memory/4792-47-0x0000017348F80000-0x0000017349000000-memory.dmp
memory/4792-43-0x0000016B319E0000-0x0000016B31A00000-memory.dmp
memory/4792-75-0x0000017349300000-0x0000017349320000-memory.dmp
memory/4792-86-0x000001734BDB0000-0x000001734BE00000-memory.dmp
memory/4792-94-0x000001734BE00000-0x000001734BE30000-memory.dmp
memory/4792-90-0x000001734CB60000-0x000001734D2D0000-memory.dmp
memory/4792-130-0x000001734D2F0000-0x000001734D300000-memory.dmp
memory/4792-134-0x000001734DA50000-0x000001734DB00000-memory.dmp
memory/4792-138-0x000001734D4C0000-0x000001734D530000-memory.dmp
memory/4792-146-0x000001734DDD0000-0x000001734DF30000-memory.dmp
memory/4792-142-0x0000016B301A0000-0x0000016B301B0000-memory.dmp
memory/4792-126-0x000001734D420000-0x000001734D460000-memory.dmp
memory/4792-122-0x000001734D380000-0x000001734D3E0000-memory.dmp
memory/4792-154-0x000001734F720000-0x000001734F7A0000-memory.dmp
memory/4792-11-0x0000017345A20000-0x0000017346970000-memory.dmp
memory/4792-162-0x000001734FC60000-0x000001734FCB0000-memory.dmp
memory/4792-39-0x0000017349BB0000-0x000001734A3A0000-memory.dmp
memory/4792-16-0x0000017347F40000-0x0000017348E60000-memory.dmp
memory/4792-19-0x0000017346B90000-0x0000017346DB0000-memory.dmp
memory/4792-150-0x000001734F620000-0x000001734F720000-memory.dmp
memory/4792-118-0x000001734D2D0000-0x000001734D2F0000-memory.dmp
memory/4792-114-0x000001734C390000-0x000001734C3E0000-memory.dmp
memory/4792-110-0x00000173493A0000-0x00000173493B0000-memory.dmp
memory/4792-106-0x000001734C130000-0x000001734C150000-memory.dmp
memory/4792-185-0x0000017353F10000-0x0000017354090000-memory.dmp
memory/4792-209-0x00000173547C0000-0x0000017354860000-memory.dmp
memory/4792-213-0x0000017352F30000-0x0000017352F50000-memory.dmp
memory/4792-205-0x0000017353650000-0x0000017353680000-memory.dmp
memory/4792-201-0x0000017352E70000-0x0000017352EB0000-memory.dmp
memory/4792-197-0x00000173545F0000-0x0000017354710000-memory.dmp
memory/4792-181-0x0000017352E50000-0x0000017352E60000-memory.dmp
memory/4792-177-0x0000017353A10000-0x0000017353D90000-memory.dmp
memory/4792-194-0x00000173535B0000-0x0000017353610000-memory.dmp
memory/4792-171-0x000001734E040000-0x000001734E050000-memory.dmp
memory/4792-102-0x000001734C250000-0x000001734C310000-memory.dmp
memory/4792-98-0x000001734C0E0000-0x000001734C100000-memory.dmp
memory/4792-82-0x000001734BF30000-0x000001734C030000-memory.dmp
memory/4792-23-0x0000017344930000-0x0000017344A90000-memory.dmp
memory/4792-71-0x0000017349350000-0x0000017349380000-memory.dmp
memory/4792-67-0x00000173492C0000-0x00000173492E0000-memory.dmp
memory/4792-63-0x0000017349280000-0x00000173492A0000-memory.dmp