My name is Yoshikage Kira

MediumMalware Reverse Engineering

Overview

A PowerShell script is provided that appears to be heavily obfuscated and wrapped in multiple layers of compression, encoding, and dynamic execution. At first glance, it resembles harmless text, but execution flow is deliberately concealed through nested transformations and runtime string construction.

Your task is to analyze and deobfuscate the script to understand how it reconstructs its final payload. The challenge focuses on unpacking multiple encoding layers, resolving obfuscated PowerShell constructs, and identifying how runtime decryption reveals embedded configuration data such as network endpoints.

Flag format: flag{ip:port}  

Job Positions

Digital Forensics Analyst

Tags

Static AnalysisDynamic AnalysisC2 CommunicationIocsObfuscation