Bruteforce the last 2 bytes of key. Can calculate the IV from there based on known bytes of the first block of ciphertext.

Original writeup (https://lordidiot.github.io/2018-11-18/ritsec-ctf-2018/#who-drew-on-my-program-crypto).