هیچی برگر [﷼]

> "hey smelly check out nmssaveeditor(.)com" > no mans save editor? > AI generated website? > "downloaded file is password protected" > "password is goatfungus" > lolwtf > download file > .zip protected with goatfungus > extract with the power of goatfungus > .msi installer file > look inside > random generated file names > look inside silly names > random ass goopie file (encrypted file) > obfuscated .vbs file > big ass fuck off .exe > mystery java file > big ass fuck off javascript file > ??? > deobfuscate vbs file > runs big ass fuck off .exe > bonk .exe > no idea wtf this thing is > node.js, but weird, weird stuff, bonk with big stick > not normal node.js .exe > brain confused > emulate > emulate fails, .exe has anti-vm stuff > wtf is this shit? all for no mans sky? > get big stick and manually carve out weird .js > super obfuscated goop > WTF AM I LOOKING AT > yara rule match > GACHI LOADER AND KIDKADI LOADER > double check > perfect match > original research from eversinc33 and JaromirHorejsi > ihbnibYYhwenfw!!2345glerp schmmermies > RHAD STEALER > NEXE This thing is a bitch. You're both heroes for bonking this with a stick and saving me a lot of time and energy. pic unrelated

Good night loves make sure to hydrate yourselves before going to bed ,3

Literally shaking, screaming, crying, throwing up right now. I thought I found a silly malware loader, but the person who wrote this bamboozled themselves. Their obfuscation toolkit failed somewhere, and Windows WScript can't parse the VBS correctly, resulting in it imploding into itself. It could have given me more free malware, instead this goof ball didn't test his malware (testing is for nerds, I can't blame them). I think they may have copied the obfuscation definition thingies at the top too many times, but I don't feel like unironically debugging their obfuscated malicious VBS code to make it work, that is ridiculous. Anyway, look at this piece of shit: https://gist.github.com/vxunderground/dc225d9180d8da7285e911372f99c527

I love when I meet nerds with who are deep in the trenches in esoteric concepts in esoteric things I met a guy who has dedicated the past couple years of his life to Batch file obfuscation and deobfuscation He has completely lost his mind. I like it. I respect it.