TryHackMe Shock and Silence - Full Walkthrough 2025 - Honeynet Collapse CTF

Описание: 🍍🐝Welcome to Honeynet Collapse! 🐝🍍

Room Link: https://tryhackme.com/room/shockandsi...

🐝🍯 Shock and Silence🐝🍯

🐝What is the full URL from which the ransomware was downloaded to the system?
🐝What was the original file name of the ransomware executable downloaded to the host?
🐝Which executable file initiated the encryption process on the system?
🐝What file extension was appended to the encrypted files?
🐝Go beyond the obvious - which ransomware group targeted the organisation?
🐝What is the filename containing additional ransom instructions for the victim?

📌 You thought that was the end? Oh no, no, no... deep down, we all knew where this was heading.

📌 Logan Hall had enjoyed a productive week and decided Friday was the perfect time to roll out new Group Policies to the DC-01 domain controller. Confident and calm, he remoted in - but what he saw made his blood run cold.

📌 Most of the files on the server had an unfamiliar extension - renamed into gibberish and completely unreadable. Trying to stay calm, he noticed a ReadMe file sitting ominously on the Desktop. He opened it... and that's when the real panic began:

🐝Tools Used:🐝
✅ EZ Tools MFTECmd.exe (USNJrnl, MFT Record)

⚠️ Educational Purpose Only
This content is for educational and authorized penetration testing purposes only. Always ensure you have permission before testing on any systems.

Don't forget to 👍 LIKE and 🔔 SUBSCRIBE for more cybersecurity tutorials!

#TryHackMe #CyberSecurity #ransomware #dfir