{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/AllobatesZaparo/malware-analysis/blob/2ab3ceacbfa239048a4892d51089d1b926dea4d2/README.MD"
  ],
  "category": "reconstruction-cases",
  "description_en": "This malware-analysis report investigates a trojanized FL Studio installer that bundles an Electron/NSIS wrapper and a Go information stealer. The author traces the wrapper statically and studies the payload in an isolated Windows environment with process, registry and network observations, recovering its reported command-and-control mechanism.",
  "description_zh": "这份恶意软件分析报告研究一个木马化的 FL Studio 安装包，其中包含 Electron/NSIS 包装程序和 Go 信息窃取载荷。作者通过静态检查追踪安装流程，并在隔离的 Windows 环境中结合进程、注册表和网络记录研究载荷，报告了所恢复的命令控制机制。",
  "entry_url": "https://awesomerea.org/resources/fl-studio-stealer-analysis-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/fl-studio-stealer-analysis-case/",
  "evidence_url": "https://github.com/AllobatesZaparo/malware-analysis/blob/2ab3ceacbfa239048a4892d51089d1b926dea4d2/fl-studio-stealer/README.md",
  "group": "cases",
  "id": "fl-studio-stealer-analysis-case",
  "json_url": "https://awesomerea.org/resources/fl-studio-stealer-analysis-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/fl-studio-stealer-analysis-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/fl-studio-stealer-analysis-case/index.md",
  "name": "Malware Analysis: a trojanized FL Studio installer and Go stealer",
  "name_zh": "Malware Analysis：木马化 FL Studio 安装包与 Go 窃密程序分析",
  "record_type": "resource",
  "relationship": "independent-reconstruction",
  "requirement_facets": [
    "scope",
    "license"
  ],
  "requirements": [
    "The author used an isolated KVM/QEMU Windows guest and a simulated network for dynamic observations.",
    "No licence file in the repository."
  ],
  "requirements_zh": [
    "作者使用隔离的 KVM/QEMU Windows 虚拟机及模拟网络进行动态观察。",
    "仓库中没有许可证文件。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/AllobatesZaparo/malware-analysis",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}