$ ctf42

CPUsage

Forensics weight 51.00 No technique tags yet.
Difficulty Not rated yet

Author: M4shl3

Flag format: ISITDTU{...}

Description: My friend noticed a high usage of CPU after he opened his laptop, I just take a memory dump of his laptop, and needs you to investigate it. Q1- What is the name of the malicious process, full path of the process, parent process id? Q2- what is the ip that process communicate with, family name of the malware?

Source: https://drive.proton.me/urls/5MM9NY7SZW#O3lmkiJIBJzr

Format flag: ISITDTU{processName-FullPath-ID_ip-FamilyName} Eg: ISITDTU{Spotify.exe-Path-141_192.168.1.1-isitdtu}

Author: M4shl3

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.