Analysis
- user interaction
yes - max time kernel
27s - max time network
34s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 01:24
General
- Target FIFA Mod Manager.exe
- Size 93.1MB
- Sample260727-bsfepatfpf
- SHA256 dc0ef0c4bf740fbb4517c09baa3c8e93741b6afaad7f7a176208a16f1c05ce7c
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Modifies registry class 20 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FIFA Mod Manager.exe"C:\Users\Admin\AppData\Local\Temp\FIFA Mod Manager.exe"1⤵
- Loads dropped DLL
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2384-106-0x000001D6AD240000-0x000001D6AD260000-memory.dmp
memory/2384-185-0x000001D6B5620000-0x000001D6B57A0000-memory.dmp
memory/2384-55-0x000001D6A5910000-0x000001D6A5930000-memory.dmp
memory/2384-75-0x000001D6A9E40000-0x000001D6A9E60000-memory.dmp
memory/2384-83-0x000001D6AA100000-0x000001D6AA200000-memory.dmp
memory/2384-86-0x000001D6AD140000-0x000001D6AD190000-memory.dmp
memory/2384-90-0x000001D6ADC60000-0x000001D6AE3D0000-memory.dmp
memory/2384-118-0x000001D6AE7D0000-0x000001D6AE7F0000-memory.dmp
memory/2384-114-0x000001D6AD4A0000-0x000001D6AD4F0000-memory.dmp
memory/2384-110-0x000001D6AD1D0000-0x000001D6AD1E0000-memory.dmp
memory/2384-11-0x000001D6A6880000-0x000001D6A77D0000-memory.dmp
memory/2384-103-0x000001D6AD360000-0x000001D6AD420000-memory.dmp
memory/2384-98-0x000001D6AD1F0000-0x000001D6AD210000-memory.dmp
memory/2384-94-0x000001D6AD0B0000-0x000001D6AD0E0000-memory.dmp
memory/2384-23-0x000001D6A7C10000-0x000001D6A7D70000-memory.dmp
memory/2384-71-0x000001D6AA0B0000-0x000001D6AA0E0000-memory.dmp
memory/2384-67-0x000001D6A9E00000-0x000001D6A9E20000-memory.dmp
memory/2384-63-0x000001D6A9DC0000-0x000001D6A9DE0000-memory.dmp
memory/2384-51-0x000001D6A58F0000-0x000001D6A5900000-memory.dmp
memory/2384-43-0x000001CE92770000-0x000001CE92790000-memory.dmp
memory/2384-39-0x000001D6AAA00000-0x000001D6AB1F0000-memory.dmp
memory/2384-47-0x000001D6A9D40000-0x000001D6A9DC0000-memory.dmp
memory/2384-31-0x000001CE927F0000-0x000001CE92830000-memory.dmp
memory/2384-15-0x000001D6A8DA0000-0x000001D6A9CC0000-memory.dmp
memory/2384-59-0x000001D6A7E60000-0x000001D6A7E80000-memory.dmp
memory/2384-134-0x000001D6AF870000-0x000001D6AF920000-memory.dmp
memory/2384-35-0x000001D6A7DC0000-0x000001D6A7E10000-memory.dmp
memory/2384-126-0x000001D6AE930000-0x000001D6AE970000-memory.dmp
memory/2384-138-0x000001D6AE9D0000-0x000001D6AEA40000-memory.dmp
memory/2384-122-0x000001D6AE890000-0x000001D6AE8F0000-memory.dmp
memory/2384-142-0x000001CE90EF0000-0x000001CE90F00000-memory.dmp
memory/2384-146-0x000001D6AFBF0000-0x000001D6AFD50000-memory.dmp
memory/2384-152-0x000001D6B1440000-0x000001D6B1540000-memory.dmp
memory/2384-154-0x000001D6B1540000-0x000001D6B15C0000-memory.dmp
memory/2384-159-0x000001D6B18B0000-0x000001D6B1A80000-memory.dmp
memory/2384-162-0x000001D6B1680000-0x000001D6B16D0000-memory.dmp
memory/2384-27-0x000001CE90F20000-0x000001CE90F70000-memory.dmp
memory/2384-19-0x000001D6A79F0000-0x000001D6A7C10000-memory.dmp
memory/2384-171-0x000001D6AFE60000-0x000001D6AFE70000-memory.dmp
memory/2384-177-0x000001D6B5120000-0x000001D6B54A0000-memory.dmp
memory/2384-181-0x000001D6B16D0000-0x000001D6B16E0000-memory.dmp
memory/2384-130-0x000001D6AE800000-0x000001D6AE810000-memory.dmp
memory/2384-189-0x000001D6B5980000-0x000001D6B5B50000-memory.dmp
memory/2384-193-0x000001D6B4CC0000-0x000001D6B4D20000-memory.dmp
memory/2384-197-0x000001D6B5D00000-0x000001D6B5E20000-memory.dmp
memory/2384-201-0x000001D6B4770000-0x000001D6B47B0000-memory.dmp
memory/2384-205-0x000001D6B4D60000-0x000001D6B4D90000-memory.dmp
memory/2384-209-0x000001D6B5ED0000-0x000001D6B5F70000-memory.dmp
memory/2384-213-0x000001D6B5B80000-0x000001D6B5BA0000-memory.dmp