NorthSec 2019 CTF Challenge

I playtested a CTF challenge for Northsec 2019 for my friend Jax - this was a fun one with a little bit of everything - ransomware, Windows, and Idris Elba.

                            ,ssJ
                            ,   ##^5#m  @#b  '@#  .#C77m
                      ,m    @b  @# ,#C  ##    @#b  @#, ^  ,##W%W,
                 ,sM   @#    @p j#b7#M  @#    ## ., ^@#  @#b    #b   ,
               %#Q     ^##   j#  @#  7%T '7%%T"   %ms##` @#    @## ,##^%m,
            @m  "##""   "@#m#W~      s##Mm###M##M#mpp    ^@p ,##M ,##m     %p
        ,,   7@p ^@# ,sM      ,#######",`",~,"||"`7%###m,   ,``  @#b  |^    ;#M,
        7##W#####  8"~    s#####^                    `|@###mp    '`       ,##"  7
          @m   '"7     ,s##b                            `^|@##,          ##b
           |@m      ,###W7"                                 ^%##p       '7
                    7@#N                                      @##Q
            ,s###mm,  "@#N                                     ^7##
         ;###"``^^7@##, "##,                                     @#m
        ###         '@#m "@#                                      "##
       @#b            @#b @##                                     '@##
       @#             @## @##                                       @#b
       @#b            @#b @#b                                      '@#~
       '@#m         ,### @##                                      ,###
         "@##m,,,,s###^ @##`                                      %##,
           '"7%WWWT|  ,##M                                         @##
                   ,###W`  ,##b                                    @##
                  %#########T@#p                                  @##
                      ~,~    ^@#m          ;###p                ]##W
                               "@##mm,,sm###C^%###m             @##
                                  '^755"""`     '@##p         ,###
                                                  '@#b   @####M"|
                                                    @#Mmm##b
                                                     '`^"75b

Status and configuration

Owner:                          Barbara Waller
Serial Number:                  QVRX8PC9FCR
MAC:                            4E:52:4F:AF:BC:02
Version:                        10.4.1.2
Origional Install Date:         24-08-2019
Last Full System Reboot:        13-05-2019 07:06:32
Reasoning:                      Scheduled system update
Linked Family Devices:          4E:52:4F:AF:B6:B5
                                4E:52:4F:AF:E6:13
                                4E:52:4F:AF:E6:3B
                                4E:52:4F:AF:F4:21
Carrier:                        NeroSoft_G
SECRID:                         3DFAF1CD6E93A43CA188468F3E84F087FC7987212DCDEBD92E1DEB2442DF0904
Frequent Netwok connections:    Wallers
                                Mommy&Me_Guest
                                tcp_cafe_Guest
NeuroSoft Network ID:           Neuro_blue_QVRX8PCC9FCR      

Full writeup is here.