Forensics
Phishy Smell
ID: forensics-002 • 500 pts
Not completed
Details
Download the attached file and inspect it.
There are many unusual things about this file, but we believe it may be attempting some unusual network communications. Please investigate and locate the flag.
There are many unusual things about this file, but we believe it may be attempting some unusual network communications. Please investigate and locate the flag.
Hint
Microsoft Word and Excel files are capable of running scripts, called macros. These can be helpful, but also dangerous. Look there for your flag!
Submit flag
Attached files
- please_review.docm — A macro-enabled Word document; note that the Macro makes a web request if run, but is completely harmless!
Connection info
type offline
notes No service; inspect the downloaded file