its right here bro (if you cant find it, try downloading the newest version)
YAT9T
Formerly 'xdxdxdxdxdxdxxd'
- Oct 2, 2021
- 144
- 96
- 104
Yes, I did what you said. Then I found it in the central park near the train station. Then it came in front of my house and disappeared again. It's not there behind the house. This cat drove me crazy.
Open the trash can at the entrace of the alley. Then you will see the a trash bag, click it multitime and the cat will appear and run away (end mission)
YAT9T
Formerly 'xdxdxdxdxdxdxxd'
- Oct 2, 2021
- 144
- 96
- 104
Will there be new missions later? Currently, I only have this and training with Leila. I don't have any other missions and there are scenes I haven't seen.
- Jun 6, 2020
- 602
- 4,583
- 426
StapleComm
Well-Known Member
- Apr 24, 2020
- 1,075
- 1,055
- 338
- Jun 6, 2020
- 602
- 4,583
- 426
I didn't do it myself yet. Guess my lazy ass will move only when it will be too late
StapleComm
Well-Known Member
- Apr 24, 2020
- 1,075
- 1,055
- 338
megamind8
New Member
- Jul 28, 2023
- 11
- 61
- 146
How did you figure out it was a stealer, because my Windows Defender didn't say anything about it. I even did a Full scan and it found nothing
- Jun 6, 2020
- 602
- 4,583
- 426
I've found where it comes from, got the domain, got the payload, cmd and executable it unpacks, analyzed it's behaviour. But I can't be sure it's a stealer. It's just... Like... 70% certainty guess
Now I'm thinking about creating plugin for unity games you could install on top of any game to get high chances of my code detecting and blocking virus, if it was there, before it does anything
StapleComm
Well-Known Member
- Apr 24, 2020
- 1,075
- 1,055
- 338
megamind8
New Member
- Jul 28, 2023
- 11
- 61
- 146
Can you share the executable, also where did you find it. I would like to look into it as well. I'm not that experienced with analyzing malware, but maybe I can find something and also I would feel better if I knew 100% what it does.
The plugin idea is good, maybe its possible to block the application from making requests/connecting to the internet in any way by hooking functions or something. I'm not sure if its possible.
im done with everything expect lila quest i found 3 magazine one in alley soda machine and overlook wheres the last one ?
- Jun 6, 2020
- 602
- 4,583
- 426
Correct
Not sure if you can download attachments from other people DMs, but I'll try to send it in DM
Would be cool to know what it does, but I'm not that experienced either, so it is what it is
hooking functions is what I was thinking about, meanwhile I've done first iteration of this hook that successfully blocks this virus (and likely many others) from executing, not yet ready to create a post about it but I'll drop it here so you may use it already to be extra safe. It will only work on Unity Mono games and only block the most suspicious calls as of this version
Install: unpack to game folder where .exe file is located
Usage: if anything too sus happens you'll get a message window and game will shut down, your antivirus can take it from there. Probably should be viable against every current virus since the virus devs don't yet know about this patch and didn't come up with any workarounds. And I assume it's 1 person or group and their methods should be pretty much the same along every infection
Last edited:
- Jun 6, 2020
- 602
- 4,583
- 426
lol antivirus patch was marked as virus what a time to live in
I'm too lazy to repack it so either don't use it or unpack and scan the files themselves, it's something with archive it's shitting about. But I strongly recommend to read the source code of a plugin to know exactly what it does
I'm too lazy to repack it so either don't use it or unpack and scan the files themselves, it's something with archive it's shitting about. But I strongly recommend to read the source code of a plugin to know exactly what it does
StapleComm
Well-Known Member
- Apr 24, 2020
- 1,075
- 1,055
- 338
Ah right shit I completely forgot, I did a full scan and I found some other trojan after it
- Jun 6, 2020
- 602
- 4,583
- 426
StapleComm
Well-Known Member
- Apr 24, 2020
- 1,075
- 1,055
- 338
I think so, yeah. Took 9 fucking hours for a full scan. Even pulled out Ethernet cable just to be safe, although no clue if that was a good idea.
Just to be sure, the name is Sabsik.TE.A!ml