Skip to content

Latest commit

 

History

History
18 lines (11 loc) · 745 Bytes

File metadata and controls

18 lines (11 loc) · 745 Bytes

Remotely Administrated Evil 1

Traffic Analysis Points - 20

What is the name of the executable in the malicious url? Submit the filename as the flag: flag{virus.bad}.

file: https://tinyurl.com/y4z72k5o
SHA1: 0416385659fc307272b3494df067f6fa2ecc937437a24a75af7c86b666bce139 Password: hacktober

Essentially the same applies as for Evil Corp's Child 1. Apply a simple filter for HTTP traffic and, in this case, it will actually already be enough to give you the first flag:

Wireshark

... the flag is: flag{solut.exe}