• Extract ZIP from PCAP with Wireshark
• Open using recovered password
• Foremost to extract another ZIP archive
• zip2john and crack hash
• Open ZIP and recover flag

Video walkthrough: https://youtu.be/-cc4U1H53F8?t=3735