CTF Writeups

Forensics, malware analysis, incident response, and more from competitions worldwide.

All 7 Forensics 7 Malware 4 Reverse Engineering 3 Web 1 Crypto 4 Walkthroughs 2 #JavaScript Deobfuscation
Hard

Cybertek CTF — Malsou9a

Full analysis of a .NET malware implant found in a memory dump — from DLL extraction and AES key recovery to C2 communication, PDF payload analysis, and JavaScript deobfuscation to retrieve the flag from Azure Blob Storage.

Memory Forensics Malware Analysis AES Encryption C2 Analysis +3
Memory Forensics • Malware Analysis · ⏱ 7 min Read