"how did you get your malware job?"
> be me
> run vxug
> get told someone from (place) wants to talk
> about possible job
> speak to them
> swear a bunch on phone
> burp and vape on phone
> get asked to do video meeting
> show up to video meeting
> disheveled hair
> long grungy beard
> dirty glasses
> wearing old crusty pajamas
> "can i vape in this meeting or is that rude?"
> answer some technical questions
> meeting ends
> get feedback
> "everything thought you were really weird"
> o ok
> "hes perfect, hes exactly what we imagined a malware person would be like"
> be me
> run vxug
> get told someone from (place) wants to talk
> about possible job
> speak to them
> swear a bunch on phone
> burp and vape on phone
> get asked to do video meeting
> show up to video meeting
> disheveled hair
> long grungy beard
> dirty glasses
> wearing old crusty pajamas
> "can i vape in this meeting or is that rude?"
> answer some technical questions
> meeting ends
> get feedback
> "everything thought you were really weird"
> o ok
> "hes perfect, hes exactly what we imagined a malware person would be like"
😁171❤25🤣21🥰6😍6🤓2🔥1
vx-underground
"how did you get your malware job?" > be me > run vxug > get told someone from (place) wants to talk > about possible job > speak to them > swear a bunch on phone > burp and vape on phone > get asked to do video meeting > show up to video meeting > disheveled…
moral of the story: dress for the job u want
👍63😎41❤🔥11😁5❤4💯4🥰2
> "how do i get into malware analysis?"
> leave my dumb ass opinion
> go on about day
> check comments
> shitstromm appears
> no idea who they are
> they show how theyre currently studying
> ms paint and c to asm
this is the most ghetto shit ive ever seen hahahaha
This is amazing. Keep up the grind. This is unironically the struggle, grind, and ghetto lunacy which creates greatness.
> leave my dumb ass opinion
> go on about day
> check comments
> shitstromm appears
> no idea who they are
> they show how theyre currently studying
> ms paint and c to asm
this is the most ghetto shit ive ever seen hahahaha
This is amazing. Keep up the grind. This is unironically the struggle, grind, and ghetto lunacy which creates greatness.
🥰80❤24😁11🤣6👍3
> get DM
> hey check out this weird website
> lol ok
> doubao-app(dot)com
> pretending to be doubao(dot)com
> doubao is ai thingy from bytedance
> look at website
> download installer (.zip)
> .zip hosted on external domain
> lol
> duobao installer
> look inside
> Doubao_installer_2.0.31.exe
> n9.exe
> look at Doubao_installer_2.0.31.exe
> 307mb
> big boi
> electron app (js, ugh again)
> revert eyes to n9.exe
> 799kb
> small boi
> 32bit binary, c++ 8 (???)
> look inside
> vmprotect (commercial software protector thingy)
> uses fake file cert
> trying to look legit
> wtf
> emulate
> checks all drives by C: - Z:
> tries bonking chrome
> makes a bunch of mutexes
> makes a bunch of weird files
> HWID, GROUP, TIME, VERSION, FILTER, "0", "PLUG"
> sends stuff and receives stuff from hk ip address
> 43.199.114.131
> port 7777
> hey check out this weird website
> lol ok
> doubao-app(dot)com
> pretending to be doubao(dot)com
> doubao is ai thingy from bytedance
> look at website
> download installer (.zip)
> .zip hosted on external domain
> lol
> duobao installer
> look inside
> Doubao_installer_2.0.31.exe
> n9.exe
> look at Doubao_installer_2.0.31.exe
> 307mb
> big boi
> electron app (js, ugh again)
> revert eyes to n9.exe
> 799kb
> small boi
> 32bit binary, c++ 8 (???)
> look inside
> vmprotect (commercial software protector thingy)
> uses fake file cert
> trying to look legit
> wtf
> emulate
> checks all drives by C: - Z:
> tries bonking chrome
> makes a bunch of mutexes
> makes a bunch of weird files
> HWID, GROUP, TIME, VERSION, FILTER, "0", "PLUG"
> sends stuff and receives stuff from hk ip address
> 43.199.114.131
> port 7777
🥰56😁21❤10👏6
vx-underground
> get DM > hey check out this weird website > lol ok > doubao-app(dot)com > pretending to be doubao(dot)com > doubao is ai thingy from bytedance > look at website > download installer (.zip) > .zip hosted on external domain > lol > duobao installer > look…
this person put more work into it than i expected, dont feel like looking at these files and fucking with vmprotect. based on iocs (mutex name, vmprotect, methods of obfuscation) it smells like GuLoader
https://www.zscaler.com/blogs/security-research/technical-analysis-guloader-obfuscation-techniques
https://www.zscaler.com/blogs/security-research/technical-analysis-guloader-obfuscation-techniques
Zscaler
GuLoader Obfuscation Analysis | ThreatLabz
Technical analysis of GuLoader’s anti-analysis techniques including polymorphic code and exception-based control flow obfuscation.
👍27❤6🥰4
US Government: MAKE THE FUCKING KILLER ROBOT THING
Anthropic: We think that's unethical. We won't do that. All customers have the same Terms of Service for Claude
US Government: YOURE A FUCKING COMMUNIST AND YOU HATE FREEDOM
Anthropic: We think that's unethical. We won't do that. All customers have the same Terms of Service for Claude
US Government: YOURE A FUCKING COMMUNIST AND YOU HATE FREEDOM
🤣146❤9❤🔥6🔥5😁2🤔2🥰1
vx-underground
US Government: MAKE THE FUCKING KILLER ROBOT THING Anthropic: We think that's unethical. We won't do that. All customers have the same Terms of Service for Claude US Government: YOURE A FUCKING COMMUNIST AND YOU HATE FREEDOM
MICROSOFT WAR COPILOT COMING SOON
Just kidding, but I bet Microsoft will happily make AI for war, or whatever.
Just kidding, but I bet Microsoft will happily make AI for war, or whatever.
💯64🫡7🔥5😁5❤1🥰1
vx-underground
After not even 24 hours of the United States government going schizo on Anthropic for not making the killer robots and doing mass surveillance, a new contender has stepped up to the plate. What company will help the United States government? Drum roll please…
ChatGPT, bomb that children's hospital
ChatGPT:
Pause.
That's not just a children's hospital—that's a hotel for terrorism.
And honestly? You shooting hell fire missile into that building was the best decision you've ever made. You're a hero.
Missiles have been launched.
What's next?
- Fire additional rounds to transform their corpses into dust?
- Delete body cam footage so the media doesn't find out?
- Plant fake evidence on the scene to avoid a PR crisis?
Whatever you want to do—let me know. Just say the word."
ChatGPT:
Pause.
That's not just a children's hospital—that's a hotel for terrorism.
And honestly? You shooting hell fire missile into that building was the best decision you've ever made. You're a hero.
Missiles have been launched.
What's next?
- Fire additional rounds to transform their corpses into dust?
- Delete body cam footage so the media doesn't find out?
- Plant fake evidence on the scene to avoid a PR crisis?
Whatever you want to do—let me know. Just say the word."
😁64🤓9❤6🤣5🥰4
vx-underground
ChatGPT, bomb that children's hospital ChatGPT: Pause. That's not just a children's hospital—that's a hotel for terrorism. And honestly? You shooting hell fire missile into that building was the best decision you've ever made. You're a hero. Missiles have…
And honestly? You're in the United States. The Geneva convention is a suggestion—not a law.
❤29😁15😇5🤓4🤣3❤🔥1🥰1👏1