Analysis
- user interaction
yes - max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
30/05/2026, 01:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spaceflight Simulator.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spaceflight Simulator.exe
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target Spaceflight Simulator.exe
- Size 651KB
- Sample260530-bry6eaex7l
- SHA256 8ca10f59fe3c6c1b44331f7a7378f717481d58fbad53d7ea25894469ef563e0c
- MD5 14a2de38f3f517851770290ec1fa7798
- SHA1 5550271404be26fc482e964a7817c8d7cd89d1a7
- SHA512 55a43637eec043ae73192b992946732a1898693dbea4caa12ec50757ae92b61d83c124ca68fb46501a649cb8e6a5cf6947066018379e4f72f12ec34fcd41a8cb
- SSDEEP 12288:2/744aOD89EoBx5d2tuanjaowMu5c/8OKw:U9aOZC5EtjWowL5iLKw
- TLSH T1DAE46B47690068EEC8ADB63C0563DA3E27259DE85F3209AD10F4DC53FD6DE972C2A385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Spaceflight Simulator.exe"C:\Users\Admin\AppData\Local\Temp\Spaceflight Simulator.exe"1⤵PID:2736
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:2056
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5820