Walkthrough for Cyberdefenders lab BRabbit

BRabbit This is the walkthrough for this Cyberdefenders lab: https://cyberdefenders.org/blueteam-ctf-challenges/brabbit/ We download the EML file from the site. It’s an email, but we can open the .eml file with a text editor like VS Code Locate the attachment, that is base64 encoded and convert to binary: cat ransom.txt | dos2unix | base64 -d > ransom.bin This is the MD5 for the attachment: fbbdc39af1139aebba4da004475e8839 This can be found in VT for instance [Read More]