$ ctf42

Communicate

Forensics No technique tags yet.
Difficulty Not rated yet

My friend told me that yesterday she received a document from a colleague, then her computer received a new windows update from Microsoft. After updating Windows to the new version, while surfing the web, she suddenly realized that she had been attacked by ransomware, all her important files were encrypted. She panicked and deleted all her documents. With your digital forensic skills, please investigate whether all the encrypted files have been stolen or not! And can you help her recover the data?

Link drive: https://drive.google.com/file/d/1S3bK5372gtfV_zqGvlY3kQW5aJNMS-8G/view?usp=sharing

Mirror: https://drive.google.com/file/d/1HlHZwXDlmecTyMvVKSHE15_MyIXEv8t7/view?usp=sharing

Note: The flag is divided into two parts.

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.