$ ctf42

Fiilllleeeeeeee

Forensics weight 26.89 No technique tags yet.
Difficulty Not rated yet

Author: Oshawk

I plugged in a USB and it encrypted my files. Luckily I had the initiative to take an image of the USB after the encryption occurred (fiilllleeeeeeee.ad1). Can you find a way of decrypting my most important file (flag.txt)?

Note: The ransomware in the image should be harmless as it only targets a specific directory that is incredibly unlikely to exist by chance.

The .zip password is fiilllleeeeeeee.

Author : Oshawk

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.