Big_Fish

syyntax traffic analysis Created By: syyntax

Disclaimer: Please note that files extracted from the PCAP may trigger antivirus alerts due to its nature. This is expected in many challenges involving potentially malicious or suspicious code. It is strongly recommended to analyze or execute files in a controlled environment, such as a virtual machine (VM), to ensure the safety of your system. Always exercise caution when handling executable files.

TGRI employee Garry Sartoris fell for a phishing attack recently. It’s hard to say what DEADFACE was after, but Turbo Tactical needs your help looking through the attack artifacts. Take a look at this PCAP and submit the attacker’s IP address.

Submit the flag as flag{IP Address}.

SHA1: d90eaf6796a469f4a38d22c7b83caedadff99ee5