Base on the name of the challenge we can guess that key[:8] is ‘VIGENERE’
But len(key) = 12 and md5(plain) = f528a6ab914c1ecf856a1d93103948fe
Now we brute-forcing 4 last chars and start the decryption, if the plain we recieved is valid with md5(plain) = f528a6ab914c1ecf856a1d93103948fe it’s our flag