TryHackMe.com - Advent of Cyber 2022 - Day 6 - writeup

Advent of Cyber is now regular seasonal room on TryHackMe page. This is their 4th time and again with awsome story to follow each day's assignment. Here are my solutions for the Day 6, if anyone gets stuck. Open the email in text editor and can solve most of the questions with analysis

1. Q1

Answer hides in 4th line of the email file - From:
2. Q2

Answer hides in 14th line of the email file - Return-Path:
3. Q3

Answer hides in 4th line of the email file.
4. Q4

Answer hides in 11th line of the email file - X-spam score
5. Q5

Copy value from message ID to the CyberChef and decode from base64. Output is the answer to this question.
6. Q6

GO to EmailRep and enter the sender email. Answer will appear right below the entry box where you have entered email.
7. Q7

Open terminal and move to the eml_attachments fodler on desktop and run:

sha256sum file_name

to get hash value which is the answer of Q7.
8. Q8

Visit VirusTotal site and enter attachment's hash
9. Q9

Visit InQuest site, enter attachment's hash and look for answer on the site

I hope anyone who gets stuck finds it helpful
AudiTTRSi