Nine - CTF Challenge Writeup

Challenge Information

Name: Nine
Category: Misc
Points: 10
Objective: Analyze forensic artifacts to determine the real name of the threat actor based on their Telegram activity and archived file data.

From User Eight, we’re given a forensic artifact similar to a previous challenge, but this time the goal is to find the real name of the attacker.
Opening telegram_profile.txt, we can view the user’s old usernames, one of which resembles a last name.
Separately, in nu5a-archiv3.txt, another potential name appears — likely the first name. Both names start with R, which supports this link.
Combining the two gives us the full name: RADITYA_PRATAMA.

SHERPACTF25{RADITYA_PRATAMA}