URLhaus Database

You are currently viewing the URLhaus database entry for https://spacecity.games/download/Launcher.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2466673
URL: https://spacecity.games/download/Launcher.exe
URL Status:Offline
Host: spacecity.games
Date added:2022-12-16 14:09:17 UTC
Last online:2022-12-27 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Iamdeadlyz
Abuse complaint sent (?): Yes (2022-12-23 21:22:07 UTC to abuse{at}hivelocity[dot]net)
Takedown time:11 days, 3 hours, 43 minutes Bad (down since 2022-12-27 17:53:32 UTC)
Tags:45-153-241-207 exe FakeGaliXCity Gh0stRAT SpaceCity

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-12-25n/aexe 9e93c67e36ef72549ac9cc945ab82cea23f5b6a602949cd931916aa435af9832n/a 
2022-12-23n/aexe 6b52037391e0c5a72cdad7ad809561cf9897afae933a3f900e237430304d24d4Virustotal results 6.94% 
2022-12-16n/aexe 94585f5b52e2d093240ccbd3ce8273784d5aa22302c04f56fd43b132fe30ea98Virustotal results 5.80%Zegost