papadope

Th3os

Challenge	Category	Value	Time
What exploit was abused to gain a local administrator beacon	Forensics	50
Find the parts of the persistence flags	Forensics	30
Decrypt the flag.txt.nviso on the user's desktop	Forensics	100
What is the URL used to download the encryption configuration	Forensics	30
What is the filename of the ransomware launched by the attackers	Forensics	50
What is the encryption key	Forensics	20
What is the MITRE ATT&CK ID of the technique	Forensics	10
HTB - Basilisk - User	Hack The Box	30
Message Received	Mobile	20
Is it called login or log in	Mobile	30
What is the email used by the adversaries	Forensics	10
What is the email address of the victim	Forensics	10
Find the flag inside the email	Forensics	10