Someone on Torrent Sites Kept Fucking with My Sonarr

A malware-laden executable disguised as a South Park episode was uploaded to torrent sites with thousands of seeders and automatically grabbed by Sonarr, a media management tool. Upon analysis, the 887 MB file contained a tiny 118 KB malware payload padded with junk data to evade scanner detection, which decrypts and executes an in-memory PE payload using ChaCha20 encryption and includes basic anti-debugging measures.