vx-underground
50.7K subscribers
4.45K photos
480 videos
84 files
1.56K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
vx-underground
> Peter Stokes > Scattered Spider guy > Arrested > Microsoft helps FBI > Read court documents > Page 12 > Microsoft tracks Stokes from GDID > Microsoft Global Device Identifier (GDID) > Stokes used Windows > Page 34 > GDID assigned to each OS install > GDID…
Chat, I don't want to sound like a schizo, but it sure is STRANGE how much data Microsoft collects with it's telemetry functionality. It's very odd Microsoft documents and records all of your web browser activity, and gaming, and can tie it to your social media, so they can improve your "Windows Experience".
πŸ₯°99🀯43😱19🀣17❀10πŸ€”9πŸ’―8😒3πŸ™2πŸ‘1πŸŽ‰1
The United States is 250 years old.

To celebrate this occasion, we will be giving everyone two hundred and fifty (250) malwares.

God Bless
πŸŽ‰231🀣51πŸ₯°20❀9😁5πŸ‘2🀝2❀‍πŸ”₯1πŸ”₯1😒1
We're slowly convincing the youth to autismmax via silly pictures of cats.
πŸ₯°159❀28😍10😁5🀣2🫑2❀‍πŸ”₯1πŸ‘1😒1😎1
Chat, today is a good day.

Look at this "Grand Theft Auto 6 BETA for FREE" advertisement that fell onto my lap. It delivers a .rar that has a .exe inside.

I am so happy. I am elated. It is free malware.
❀118🀣68πŸ₯°15πŸ”₯8πŸ‘3😒1
vx-underground
Chat, today is a good day. Look at this "Grand Theft Auto 6 BETA for FREE" advertisement that fell onto my lap. It delivers a .rar that has a .exe inside. I am so happy. I am elated. It is free malware.
Literally shaking, screaming, crying, THROWING UP.

The .exe is bundled with BUN (some Javascript bullshit). I deobfuscated the main goop inside of it, found the C2 configuration (where it downloads cool malware from), and ... it's dead.

Cloudflare KILLED THEIR C2. THE MALWARE IS DEAD. THEY KILLED THE MALWARE CAMPAIGN.

How are we supposed to get malware from fake Grand Theft Auto 6 advertisements if Cloudflare KILLS their infrastructure???

RIP NWHStealer campaign ID 202fdde5193b.
RIP NWHStealer c2 unauth-amper(.)cc
🀣152😒21❀17🫑4😁3πŸ₯°2🀝2πŸ’―1
vx-underground
Literally shaking, screaming, crying, THROWING UP. The .exe is bundled with BUN (some Javascript bullshit). I deobfuscated the main goop inside of it, found the C2 configuration (where it downloads cool malware from), and ... it's dead. Cloudflare KILLED…
I only have one question though... This malware kills itself if it detects the following strings:
- sandbox
- sand box
- malware
- virus
- maltest
- peter wilson (??????)
- paul jones (??????)

who THE FUCK is peter wilson and paul jones???
🀣192😁17❀12😱5πŸ€”3πŸ₯°1😒1
🀣128πŸ”₯26πŸ€“11❀8πŸ’―7πŸ‘5πŸ₯°5🀝3😒2πŸŽ‰2
I'm on the weird part of the internet reading about Termite microbiomes

Now I'm frustrated scientists haven't conducted more research into biotechnologies that allow humans to extract nutrition from woody stuff like lignin

tldr why science man no let us eat wood wtf
πŸ”₯86😁33πŸ’―16❀7🫑7πŸ₯°2πŸ€”2πŸŽ‰1🀣1
The fact the United States Department of Homeland Security took down an anime streaming website, and arrested the websites administrators, can only mean one thing.

Weebs pose a serious threat to the United States government. They're dangerous. They must be contained.
🀣183πŸ’―13πŸ€”9😒7😁6❀4🀯4πŸŽ‰2πŸ₯°1
Last time on Dragon Ball Z: I made a long ass post discussing my Benzodiazepine dependency. Lots of people sent me DMs, or left comments, calling me "brave", or something (is addiction and/or dependency taboo or something?). People also DMd me saying they also have Benzodiazepine dependency but were too scared to try to taper due to how dangerous the drug can be.

Behind the scenes I've basically been a test dummy for some people. Let me share with all of you how cool and badass my taper has been

> be me
> on benzos for 14 years
> not supposed to do more than 90 days
> everyone like "wtf bro"
> decide to do 25% reduction in dosage
> people call me crazy
> withdrawals start after two days, or something
> day two arrives
> insanely high anxiety
> heart sometimes races
> sometimes feel really hot
> sometimes legs feel like jelly
> sometimes really grumpy
> weird withdrawals arent nonstop
> comes in waves seemingly randomly
> sometimes better, sometimes worse
> not too bad, honestly
> really, really, really bad insomnia tho
> day five
> every clams down
> shrimple, not too bad
> consult with addiction specialist to help insomnia
> give me sleeping pills (trazadone)
> "go to hospital if you get dangerous erection"
> okay?
> hold previous 25% cut for a few weeks
> decide to aggressively taper again
> another 25% cut
> total reduction would be 50%
> start
> day two arrives
> feel really sad
> doesnt feel like depression
> feel "blue", just low energy and kind of mopey
> everything in my life great
> no reason to be sad
> legs sometimes feel like jello
> anxiety back
> heart race sometimes
> heart sometimes beat really hard
> mostly really sad

The sadness feels like I'm a 14 year old boy in math class whos crush (Susie Bananas, straight A student, champion of the Spelling Bee) recently told you in secret she has a crush on Joseph FastFeet (fastest kid in school), and now you're sad and have to listen to really emo music in your bedroom while your parents make you pancakes for dinner. It's not crippling depression, but you just feel kind of emotional.

The weird heart beat thingie is like, you'll be laying in bed and it's like your heart turned the bass up to fuck off level. I'm in bed and it feels like my heart is punching the mattress through my back. It's interesting.

Overall the taper hasn't been too bad.

Pic related: what my anxiety feels like during taper (just cat crushing the planet).
❀120🫑25πŸ™11😒9🀣5πŸ₯°3πŸ”₯1πŸŽ‰1
vx-underground
Last time on Dragon Ball Z: I made a long ass post discussing my Benzodiazepine dependency. Lots of people sent me DMs, or left comments, calling me "brave", or something (is addiction and/or dependency taboo or something?). People also DMd me saying they…
But for real, I had sooooo many DMs of people telling me about their dependency on anxiety medications. People seemed scared to discuss it? Dawg, EVERYONE knows SOMEONE with dependency and/or addiction problems (alcohol, pain killers, benzos, whatever).

It isn't anything to be ashamed of.

In my experience thus far though, some people are kind of weird like ... "just quit cold turkey bro, just drink this cleansing tonic from my favorite Instagram Influencer for $15.99 per bottle" ... just BAD medical advice and kind of superstitious thinking? I don't know. I think everyone wants to help, or offer support, but sometimes their support or opinion isn't very good... but whatever bro, we ballin', fuck it
❀83πŸ’―13πŸ₯°7❀‍πŸ”₯4😁4πŸŽ‰2
> be me
> vxug admin
> 500,000 followers across social media
> crazy malware cat guy
> talk at unis
> millions of malwares
> unis use my website
> students use my website
> companies use my website
> governments use my website
> be mentioned by famous youtubers
> in tons of news article
> feel super cool and badass
> try to bond with younger family members
> "hey, you like someordinarygamer and moistcritical. they talked about me. thats pretty cool huh?"
> they roll eyes
> "they dont know that youre actually old and cringe"
> kills me inside
> talk to wife
> "hey fbi most wanted guy gave me an autograph!"
> she sighs
> "thats nice, but can you please just take out the trash?"
> kills me inside
> talk to young family member again
> "hey my self published book is trending top seller on amazon. thats cool huh?"
> rolls eyes
> "i guess, its not like its at barnes and noble or something"
> kill me inside
😒235πŸ₯°23❀12😁11🀣10😘7πŸ‘3πŸ™3πŸ”₯2πŸŽ‰2πŸ’―2
vx-underground
> be me > vxug admin > 500,000 followers across social media > crazy malware cat guy > talk at unis > millions of malwares > unis use my website > students use my website > companies use my website > governments use my website > be mentioned by famous youtubers…
> try to bond with young family members again
> want to be cool
> use slang
> gang, aura, slimed, chopped, huzz
> hehe ik the lingo
> "ew ACTUALLY dont talk like that, youre old"

WHY CANT I BE COOL. LET ME BE COOL
😒193🀣68❀13πŸ₯°6❀‍πŸ”₯5πŸ”₯2πŸ€“2πŸŽ‰1🀝1😎1
Good news for people who like malware: I have more malware coming soon

Bad news for people who HATE malware: I have more malware coming soon

What does this mean? It means I'm adding another 75,000 malwares and like, 50 papers on malware reverse engineering tonight.
❀106πŸ₯°24πŸ”₯18🀣7🀯6😒3πŸ‘2🀝1
> check news
> see giant penis
> ???
> read news
> "The phallic forecast predicts a cluster of thunderstorms, hail and heavy windows could come through the Upper Midwest, before finishing in the central Great Plains"

wtf are meterologists actually degenerate nerds too?
πŸ₯°63🀣39❀‍πŸ”₯4❀4😱2πŸ‘1πŸ”₯1😒1πŸ’―1
Tiny people living inside my computer,

I have synced the malware to prod. It is roughly 75,000 malware. Please download the malware. If you do not download malware this cat with a loaded revolver will shoot something (or someone).

https://vx-underground.org/Updates

Cheers,
-smelly
❀78πŸ₯°19πŸ‘7🀣5πŸ”₯2😁2😒1
I want to give a big shoutout to "WatchBeam.exe". WatchBeam is the LOUDEST malware I've ever seen.

When I say "runs cmd.exe", I mean it creates a new process. So, in the list below, it is literally creating a new process each time. Does this sound suspicious to you?

> run .exe
> runs cmd.exe, checks if running as admin
> runs powershell, checks screen dimensions
> runs cmd.exe, checks screen dimensions (again)
> runs cmd.exe, checks video controller
> runs cmd.exe, checks disk type
> runs cmd.exe, checks if "VBOX" is present
> runs cmd.exe, checks if "VBOX__" is present
> runs cmd.exe, checks if "VBOX" in registry
> runs cmd.exe, checks if "VirtualBox" in registry
> runs cmd.exe, checks if "VBoxGuest" present
> runs cmd.exe, checks if "VmWare" in registry
> runs cmd.exe, checks if "vmmouse" in registry
> runs cmd.exe, checks if "KVM" in registry
> runs cmd.exe, checks computer model
> runs cmd.exe, checks computer name for "Xen"
> runs cmd.exe, checks computer name for "HyperV"
> runs cmd.exe, checks computer name for "Virtual"
> runs cmd.exe, checks computer serial number
> runs cmd.exe, checks mouse position
> runs cmd.exe, checks motherboard serial number
> runs cmd.exe, checks default drive letter
> runs cmd.exe, kills chrome
> runs cmd.exe, kills edge
> runs cmd.exe, kills brave
> runs cmd.exe, kills opera
> runs cmd.exe, kills vivaldi
> runs cmd.exe, kills yandex
> runs cmd.exe, kills orbitum
> runs cmd.exe, kills atom
> runs cmd.exe, kills kometa
> runs cmd.exe, kills torch
> runs cmd.exe, kills amigo
> runs cmd.exe, kills coccoc
> runs cmd.exe, kills uran
> runs cmd.exe, kills slimjet
> runs cmd.exe, kills ivaldi
> runs cmd.exe, kills firefox
> runs cmd.exe, checks computer serial number (again)
> runs cmd.exe, checks computer status
> runs cmd.exe, checks Windows type
> runs cmd.exe, checks if antivirus installed
> runs cmd.exe, checks if Windows Defender on
> runs cmd.exe, checks computer status (again)
> runs cmd.exe, checks if Kaspersky installed
> runs cmd.exe, checks if Norton installed
> runs cmd.exe, checks if McAfee installed
> runs cmd.exe, checks if BitDefender installed
> runs cmd.exe, checks if AVG installed
> runs cmd.exe, checks if Windows Defender on (again)
> if all tests pass, downloads malware

YOU CREATED A NEW CMD.EXE PROCESS 48 TIMES. WHAT THE FUCK ARE YOU DOING?
😁126🀣90❀15πŸ”₯7😎6πŸ₯°2🫑2😒1
vx-underground
I want to give a big shoutout to "WatchBeam.exe". WatchBeam is the LOUDEST malware I've ever seen. When I say "runs cmd.exe", I mean it creates a new process. So, in the list below, it is literally creating a new process each time. Does this sound suspicious…
My Brother in Christ, your attempt at being stealthy unironically made your malware super loud. Your shit is not fooling ANYONE. Scrap this whole thing dawg, start over, because this shit is fucked up. I'm actually laughing at how absurd this payload is.

48 TIMES BRO
🀣144❀12πŸŽ‰5😎2πŸ₯°1😒1😍1🫑1
> make post making fun of malware
> get message
> look inside
> "Drop dead, you fucking idiot"
🀣123😒20❀16😁3πŸ’―3πŸ₯°2😱2πŸŽ‰2❀‍πŸ”₯1πŸ”₯1πŸ‘1