هیچی برگر [﷼]

> "hey smelly check out nmssaveeditor(.)com" > no mans save editor? > AI generated website? > "downloaded file is password protected" > "password is goatfungus" > lolwtf > download file > .zip protected with goatfungus > extract with the power of goatfungus > .msi installer file > look inside > random generated file names > look inside silly names > random ass goopie file (encrypted file) > obfuscated .vbs file > big ass fuck off .exe > mystery java file > big ass fuck off javascript file > ??? > deobfuscate vbs file > runs big ass fuck off .exe > bonk .exe > no idea wtf this thing is > node.js, but weird, weird stuff, bonk with big stick > not normal node.js .exe > brain confused > emulate > emulate fails, .exe has anti-vm stuff > wtf is this shit? all for no mans sky? > get big stick and manually carve out weird .js > super obfuscated goop > WTF AM I LOOKING AT > yara rule match > GACHI LOADER AND KIDKADI LOADER > double check > perfect match > original research from eversinc33 and JaromirHorejsi > ihbnibYYhwenfw!!2345glerp schmmermies > RHAD STEALER > NEXE This thing is a bitch. You're both heroes for bonking this with a stick and saving me a lot of time and energy. pic unrelated

Good night loves make sure to hydrate yourselves before going to bed ,3