Agent,
We seized a computer from the “Black Anvil” ransomware boss, Leonard “NAVAJO” Petrov. He hides the team’s encryptor behind the following SHA-256 hash value.
Find the password, and you can download the file.
On‐site interviews and forensic analysis have yielded the following background:
Date of Birth: April 7, 1988
Hometown: Yakutsk
University: Tomsk State University (2010)
Mother’s Maiden Name: Sokolova
Partner: Anya Moroz
Partner Date of Birth: July 22, 1990
Child Name: Irina
Child Date of Birth: November 5, 2018
Pet: Boris
Log files show the password is exactly 10 lowercase characters, containing two numbers, and ends with two special characters. It’s made from three pieces of his life.
We already pulled the SHA-256 of the correct password. The encryptor sits at a path made from this value (like /enc/<SHA256(password)>.xz):
e851f0d22a01c35481a852eba6f747fda670ffdcb6bd47d947945e74a377aafa
Your mission: make a small wordlist from his life details, find the plaintext password, and enter it below. If it’s right, you’ll get a download link to the encryptor. Download it and analyze it to get the flag.