Level: Medium
Points: 397
Author: Justin Applegate
Description:
Our antivirus detected a malicious file on our machine and has given us the hash:
`a259082f33573151375ea00df28468fd`
We'd like to know more information about it.
-----------------
This file makes a shell command with a URL inside of it. What is the full URL contained?
Flag format - `ctf{http://domain.tld/file.extension}`
The Behavior tab of VirusTotal's report on the malware contains all the shell commands run by the program.
Flag - ctf{http://ttgholidays.com/s.png}