Kinoco Hacker Hands-on security practice
All challenges In progress
Forensics Level 3 55 points

Find Suspicious Network Connections in Memory

Mission

Analyze the network-connection record `netstat_dump.txt` to identify the suspicious C&C connection. The single ESTABLISHED connection to a public IP on a non-standard port holds the flag.

#forensics#memory#malware#network#c2

Clear it in 3 steps

Not started

  1. Start the environment

  2. Investigate the target

    Available after the environment starts

  3. Submit the flag