This the write-up by the challenge author.

tl;dr Volatility

Link to the write-up : https://volatilevirus.home.blog/2018/10/27/bsides-delhi-ctf18-never-too-late-mister-write-up/

Original writeup (https://volatilevirus.home.blog/2018/10/27/bsides-delhi-ctf18-never-too-late-mister-write-up/).