So my uni uses a format called .hwp, similar to .docx, and it can be only opened by a dogshit called Hancom which costs 60 bucks. Converting breaks fonts and stuff and I aint boughting this shit.Since it isn't used anywhere outside this retard nation the crack isn't avail on reputable sources like Rutracker. had to use Google Search (keyword: "한컴 오피스 2024 무료")I came across the following link:https://nameesse.tistory.com/965But something about it felt off-the compressed installer is 1.1 GB, the post doesn’t mention who made the crack, nor where he got it, nor a rough explanation on how it works.So I extracted the file(in retrospect I should have used a VM just in case, I did a windows reinstall just in case) and uploaded it to Viru Total-Trojans and Ransomware.So I dug into this out of curiosity and it seems the hacker used a legit crack and redistributed it with malwarehttps://blog.plainbit.co.kr/analysis-fake-hancomoffice-install-file/It was from originally herehttps://johojun20.tistory.com/m/68Anyways, I’m a techlet- can the opsec experts here explain to me how the DRM and OG crack works, how the malware works, what it does, the family, whether this is a common tactic, and who probably made it and why?
You fucking imbecile dont install cracked stuff that has a installer in it
>>107739747If you did a clean wipe then, you are fine. I guess.
>>107739776not if it’s a bootkit
>>107739788Then this korean is fucked
>>107739804Rip koreanon
>>107739817 I didnt execute it, and Virus Total shows you what the malware was, I justed wanted to know some extra details about the programs designed to make 12 year old Timmy into bricking his mom's PC.Like what the type and family is, how it bypasses windows defender, who made it, its evolution through the years, and how antivirus programs are dealing with it
>>107739859whatever you say Ryo-chan
use 한컴독스
>>107739747uni will pay the ransom, don't worry about it
You are chinese
>>107739747/r/Piracy megathread --->
>>107739747just install it in a virtual machine and see what happens
Just run it and it might work some russian hacker that made that is probably fertilized in Ukrainian soil already
>>107740762it knows when you`rr on VM tho
