![BelkaCTF#6 - [10] Luxury(Warmup, 357)](/_next/image?url=https%3A%2F%2Fwww.notion.so%2Fimage%2Fhttps%253A%252F%252Fbelkasoft.com%252Fbelkactf6%252Fassets%252Fimg%252Fpanels%252F9_ba0f95ab92d4bba02029a77375d9cef1.png%3Ftable%3Dblock%26id%3D048953f8-e73e-4a10-a385-5223e941ffb9%26cache%3Dv2&w=3840&q=75)
d2n0s4ur
The Chief looked pleased again. I decrypted the encrypted file, and now he chuckled while staring at the screen.
—There you go, rookie, learn how to live. "I'll go take a nap," haha. These people know how to have fun!
Q. Which luxurious item did Phorger put his laundered money into?
Format: full name incl. any codes, e.g. Bugatti Chiron BG744
Solve
Used Tool
- BelkaSoft X
- Autopsy
- Microsoft Excel
Using Autopsy, you can download vhdx file.
Also, at the Notes artifact on BelkaSoft X, you can get BitLocker recovery key for the vault.
BitLocker recovery Identifier: 929983CA-5012-49E9-A194-4550C08C6127 Recovery key: 590238-514580-359986-088242-029766-319495-410509-636911
Using the Recovery Key, You can access to vault.
At the Spending.xlsx, The most Luxury usage was Rolex Submariner Date ref 126619LB
Answer: Rolex Submariner Date ref 126619LB