Don't Leave Me Hanging
Category: Traffic Analysis
Points: 500
Description
<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/dont_leave_me_hanging.jpg');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail"></iframe> <sup>Created By: <code>@Cyb0rgSw0rd</code></sup>
Sounds like Deadface are trying to sneak some data out of Aurora Health... but the security is pretty locked down. We suspect that they might be trying to work it from the inside out. The head of security noticed that the traffic for the help desk subnet was flagging for anomalous activity and set the packet capture to us for a set of fresh eyes on the situation.
Submit the answer as deadface{deadface alias}
Download PCAP(80MB)<br>
<sup>SHA256: 93bf96711676fa3675d0bd8729ccdf00ffc80ef4ddcc4e1892dfa1a45f11e6f2</sup>