Hash and Cash
Greetings, Special Agent K.
The client has suffered a catastrophic ransomware attack. At 03:00 AM, the entire infrastructure went offline. Every single file on the production and backup servers has been encrypted. No ransom note was immediately found in the clutter, but the EDR (Endpoint Detection and Response) managed to capture a hash of the main encryption binary before being terminated.
Our initial triage recovered a single high-priority Indicator of Compromise (IoC) from the local buffer logs:
02b49fd8781580e1f25034c9ca89d7989729f6ca898579f434cc6122247b7c06
The Board of Directors is panicking. They need to know exactly who they are dealing with and the scale of this group's recent success to decide on the negotiation strategy.
Your mission is to identify:
- The official name of the ransomware group associated with this hash.
- The estimated total revenue this specific group accumulated by late September 2025 (please round to the nearest million).
As always, Special Agent K, the contract is yours, if you choose to accept.
Answer Instruction
Download the flag-file using the button below
Unlock the flag-file using the answer as the password
Answer format: groupname-amount
Answer example: lockbit-120