Hacktober 2020 CTF - Evil Corp's Child 2
Oct 16, 2020
Challenge Description
The malware uses four different ip addresses and ports for communication, what IP uses the same port as https? Submit the flag as: flag{ip address}.
Use the file from Evil Corp's Child.
Solution
On this chalange, we used the same pcap file from Evil Corp's Child Chalange, within Wireshark we open the Conversation Statistics tab
Within the TCP Tab, we got 19 conversation, 9 of them use port 443, and 213.136.94.177 took part in 3 of those 9.
Our flag : flag{213.136.94.177}