Theme Rock

@rtfclsm
Jeff proved to be quite of a troublemaker and a gluttonous little beast, as all he wanted in his life was having fun with his friends and eating all kinds of food.

episode 4

fxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ #FXPGUNZ.COM
What the fuck you thinkin your heart is gonna be sinkin
Good game headshot
Killtacular
Im Dracula
I'm drainin life from these lames even if ya 2 factor auth
Oh bitch thats right
Pulled a fast one on ya
I dont need yo computer and I dont need your ip number
I be parsin stolen data while these pussies be slumberin
Know I need the booty so I proceed onto plunderin
Thunder and lightening it is so exciting
The data contained within these clouds is so inciting
Shells electrifying via netcat piping
Persistence is surviving
In your kernel hiding

Persistence is surviving
In your kernel hiding
Shells be so exciting
Dun dun dun dun dun
Thunder and lightening it is so exciting

No I ain't gone you really arent that lucky yet
Closed that port but conntrack say established
Reverse to a hop before my IP hit the blacklist
Encapsulate the packets, ain't making no racket
Lay low, till I pivot thats my tactic
Dont wait to long, white hats will unpack it
Easy on them packets, UDP no SYN-ACKin
Minimal traffic, hidden inside a brackets
Always assume that an anti is sniffin pcapin
Meticulous move is no cuttin corners we not craftin
Wait for the RSA keys an then we get to fucking jacking
Inside the loot is another target we attacking

The infamous tales of the sharpest death of a Gunz The duel serverr that prolib initiated it destruction by starting a beef that was dormant / finished to impress is pseudo online friends before throwing them under the bus .
You shall have let the kid alone and play other arena shooter instead of trying to pointblank the attentions you crave.  - 

fxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ #FXPGUNZ.COM
#ARP-SPOOFED #NETWORK #GUNZTHEDUEL #GUNZ #GAMING

The GunZ Conntracc sNAT

GunZ: The Duel [muyshai remix]

Refundable and Exchangeable for a fee

Door to Nothingness

Female Goat Without Defect

Never Seen Before The Most

Little Fearless' Head

Hot Chocolate on my trousers

op const - GZ THE SIGKILL The infamous tales of the sharpest death of a Gunz The duel serverr that prolib initiated it destruction by starting a beef that was dormant / finished to impress is pseudo online friends before throwing them under the bus .
You shall have let the kid alone and play other arena shooter instead of trying to pointblank the attentions you crave. -
fxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ #FXPGUNZ.COM
#ARP-SPOOFED #NETWORK #GUNZTHEDUEL #GUNZ #GAMINGfxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ from ragegunz, to fxpgunz.com , to his military practice he left his windows compiler path  pdb in it.  Which is how i found his name ( Ohad ) . I also broke vmprotect on all the gunz.exe he served. The launcher purposely use an oudated .net, deprecated ssl version . His old host used  beer.consistdev.co.il  b4 moving to another host provider.  He works as a programmer as a job but this is his side project. 
Make sure to look at both relations and behaviour
https://www.virustotal.com/gui/file/3c67b3fc77d4807aa3af755118f748aef373f878e602e1e49884ce96db128c77/behavior
https://www.virustotal.com/gui/file/5db24f34d010fd728dbe788e96bd3aa11cd512a85a28642604945dd1b30d8e57/behavior
0asc.scd
https://www.virustotal.com/gui/file/7dcf268fb73001c6d5a618702120329b4004ddea4ccbec9f6abcdedd10faf389/relations
D3DX9D.dll
https://www.virustotal.com/gui/file/0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f/detection
couple gunz.exe from fxp
https://www.virustotal.com/gui/file/2a3b955a2ba3c4329a26b56d29d6ae7baa9053f2d184155632bcff9109b32e26/detection
https://www.virustotal.com/gui/file/d39828a33a07af259921811a52513f0f5824ccb3aa56151ff6bab3b51847a45f?nocache=1
https://www.virustotal.com/gui/file/d39828a33a07af259921811a52513f0f5824ccb3aa56151ff6bab3b51847a45f/relations
https://www.virustotal.com/gui/file/d9071790a18cd1c7db2a14824115efca7bb2b806dd799a378b34fdaef71bb0a9/behavior
sharp/ohad tested several exe b4 using them on fxp domain , often he bundled those inside a zip.
https://www.virustotal.com/gui/file/250bba2b5f30bcc38cce29d985f80fc1f48a98ce33d38287466481866e264ab1?nocache=1
https://www.virustotal.com/gui/file/cb2faf786fe5fd22dde9894fc0e16b32006e495dbba92e5e6612fbea475c290e/relations
in depth data https://cryptpad.fr/code/#/2/code/view/M23D6IXLH4aCR8XWOAxCQ6YbzsmxZCZ4jQrBYQ+yuFo/

New tracks tagged #Gunz