Case file · MOTHWING 2.4.1

Each answer is the key to the next layer. The page can't show you layer II until you give it the campaign id from layer I, so there's nothing to find in the source. MOTHWING is fictional and every byte here is synthetic. Hosts come from reserved documentation ranges and are shown defanged. The workbench runs entirely in your browser, and nothing you paste leaves it.

Five layers to the C2

A stealer's configuration was recovered from a memory dump. Five layers stand between you and the operator's C2.

5 layers · 0 solved
core · locked
Each layer is a planet. Solve one and it lights, and the next orbit draws in. The core opens when all five are down.
Layer I · Encoding

Loading

Artifact 

          

          

            
            

              
              
            

            

          

          

            

              Hints
              
            

            
    
          
    
        
    

        
      
    

      
    
        
    
          
    Workbench
    
          
    A small CyberChef. yes, the real one exists lol. Chain operations, reorder them, switch them off. The recipe lives in the address bar, so a link shares it. Nothing here touches the network.
    
        
    
        
    
          
    
            
    
              Input
              
    
                Read as
                
    
                  
                  
                
    
              
    
            
    
            
    
              Load artifact
              
    
              
              
            
    
            
            
    0 bytes
    
          
    

          
    
            
    
              Recipe
              
    
                
                
              
    
            
    
            
    
            
      
            
      No steps yet. Add an operation above: each one feeds the next, top to bottom.
      
          
      

          
      
            
      
              Output