Post #9507
1.52K
vx-underground > be me > get dm > "smelly, i found goop" > wtf i love goop (malware) > weird .vbs file sent > "RateConfirmation.vbs" > hmmm > download > look inside > shrimple file loader > downloads "grape" .zip from funny domain > download grape zip file > NodeJS electron…
In order to get the good goop from this goop loader I'd have to setup a fake VM, make it appear to be in Illinois, United States, and some how make it appear to be a legitimate computer for a trucking and/or transportation hub, and maybe if the stars align it'll trick the Threat Actor(s) into pushing more goop to my machine.
- ❤ 34