هیچی برگر [﷼]

this is the guy calling you the N word on discord

> get dm > "hey smelly, i work for (kind of important place)" > "vendor sent us weird file, its sus af" > "what do u think?" > download file > look inside > ultra mega fuck off malware > pe position independent .code is set to RWX > multiple extra sections > extracts .bss segment > .bss has .exe inside it > .exe ASPack 2 compressed > emulate > has anti-vm features > pulls .bat from c2 to self-delete > still bonking my brother in christ, if your company ran this .exe from this vendor, you better call someone ASAP because your company is COOKED. also, this vendor is either a criminal enterprise or compromised. gl big dawg. happy monday

▓▓▓▓▓▓▓▓▓░░░░░░░░░░░ 49%

original payload: https://gist.github.com/vxunderground/91da9c50e400a6742bbacd1548a255d8

> be SmartLoader > big ass fuck off malware campaign > tracked by dozens of anti malware companies > heavily obfuscated lua > bamboozles everyone > me jimmies rustled > team up with roblox cheater nerd > reverse engineer it back to src > (almost done) https://gist.github.com/vxunderground/aaa6a88823afc83b4f8a73366694966d

My deepest condolences to my colleagues in Venezuela and those impacted by the recent earthquakes. I wish I had more to offer other than words. I hope you're all doing well and I hope you're all safe.

huh

I'm sorry, SmartLoader malware campaign, I shouldn't have called you a little bitch. That is very rude of me. I am just passionate and have spent some time working on it, so my emotions are high. I love you.

I've almost reverse engineered the SmartLoader obfuscated code all the way down to a working source code You can't hide behind Prometheus you little bitch