Bulgaria drop

From otp22 db
Revision as of 11:25, September 9, 2013 by 85.134.26.187 (Talk) (data.bin :)

Jump to: navigation, search
Bulgaria CD drop
Parcel.fbi.jpg
Location     Dimitrovgrad Bulgaria
Coordinates
Landmarks Stefan
Items CD
People/Visitors
Found 9-06-2013
Type Other
Status Acquired



Check also UF link

We got CD content:

https://www.dropbox.com/sh/mkltz004gql56d4/xbX21pytra

data.bin 32.08 MB IFFOUND.TXT 774 bytes SHOPPING.TXT 378 bytes


IFFOUND.TXT:

Code:

========IF===FOUND======
======-====STOP==========
=============+=========
IF YOU FIND THIS DISK
KINDLY DO NOT REMOVE IT
AS THIS IS MY SHOPPING
LIST TO HELP ME REMEMBER
WHAT TO BUY FROM THE STORE
EVERY TIME I MAKE A SHOPPING
LIST A BUNCH OF WEIRD
FILES SHOW UP BUT I NEED
TO KNOW HOW TO UNCHECK
THAT OPTION IF YOU KNOW
HOW THEN PLEASE CALL ME
AT +1 202 204 2303 AND IF
YOU SAY THE NUMBER
A16395 IT WILL REMIND
ME BECAUSE ITS MY FAVORITE
NUMBER AND ALSO IF YOU FIND IT
YOU CAN CALL
ME AND LET ME KNOW AS
I MUST HAVE LOST MY SHOPPING
LIST AND CANT BUY THE STUFF
I WANTED FROM THE STORE
THANK YOU
========================
ROBERT: YOU CANNOT HIDE
FROM WORMS. WILL WE FIND
YOU.
========================
===THANK YOU=====
================
482608888888888889
05 78 94 84 78 25 92


SHOPPING.TXT:

Code:

SHOPPING LIST (DO LATER WHEN NIGHTLIGHT)
=========================================
+37    Black/Orange Worms Riding ATVs
+64.69 Green/Rainbow Worms Riding OHGs
2      Switches

ACCOUNT INFORMATION
=========================================
ORANGE SWITCH  : *340938AB#
RAINBOW SWITCH : *991837DA#

FINAL CODE: *3033090004#
FINAL VRFY: *97841000DDDDDD#

SYNC: 4888883910000988886


data.bin :

"Random" binary data, 33633585 bytes long.

It was found that the file can be decrypted by XORing with a file from the Black OTP 9 disk. The decrypted file is a WMV video.

Decrypted file: https://dl.dropboxusercontent.com/u/28940500/output.wmv

Decrypted video on youtube: http://www.youtube.com/watch?v=jqNQMeIX-dM

The video contains some DTMF tones heard when it is demonstrated how to use the "Cleveland Direct" calling card to call numbers. The tones are:

Tone nr. Time in Video Decoded Number
1. 2:01 - 2:10 212 364 9953
2. 2:26 - 2:33  ??
3. 2:41 - 2:52  ??
4. 3:03 - 3:11  ??

check logs for more: http://198.23.165.56/irclogs/%23arg/2013_09_08_%23arg.log

INVESTIGATION:

Traveling + and - indicator:

oTHLt56.jpg


<----this line neds fixing