## Projan

***
I found malware in my system. It was trying to steal my DogeCoins! Can you find the name of this malware? (.pcap file included)
***

pcap file (696,787 bytes) has following protocol hierarchy

Projan1.img


after few minutes of browsing http streams I have found that user downloaded a suspicious file named ```goog1e_born.exe```


I have found a checksum on web and uploaded it to virus total, maybe it is not a common way of founding malware name but I have tried one of tags in the community sections.


flag is SBCTF{ponmocup}

Original writeup (https://github.com/eroloo/ctf/tree/main/Loki2021CTF/Projan).