EscapeRoom blue team ctf

What attack type was used to gain access to the system?(one word)

What was the tool the attacker possibly used to perform this attack?

How many failed attempts were there?

What credentials (username:password) were used to gain access? Refer to shadow.log and sudoers.log.

What other credentials (username:password) could have been used to gain access also have SUDO privileges? Refer to shadow.log and sudoers.log.

What is the tool used to download malicious files on the system?

How many files the attacker download to perform malware installation?

What is the main malware MD5 hash?

What file has the script modified so the malware will start upon reboot?

Where did the malware keep local files?

What is missing from ps.log?

What is the main file that used to remove this information from ps.log?

Inside the Main function, what is the function that causes requests to those servers?

One of the IP's the malware contacted starts with 17. Provide the full IP.

How many files the malware requested from external servers?

What are the commands that the malware was receiving from attacker servers? Format: comma-separated in alphabetical order