inksec.io ☕enjoying the writeups? buy me a coffee ← blue team

// BTLO · writeup

Graphi

BTLO Hard x64IDApssuspend

← all labs challenge page → proof of completion →

🔒

// active lab

writeup locked

encrypted per platform guidelines · password available to recruiters on request

Static and dynamic analysis of a svchost-hosted implant that self-configures via XOR-obfuscated blobs and uses Microsoft Graph as its entire C2 channel.

// incorrect password

enjoying the writeups? ☕ buy me a coffee

← blue team ops inksec.io red team →

scroll = zoom · drag = pan · double-click = toggle · esc = close