Gotchalocked? - My Wild Ride Trying to Bypass a Ransomware AES-256 Lock

wpifak

New member
Joined
Nov 6, 2006
Messages
4
Reaction score
0
Hey guys, gotchalocked? I just got hit by a ransomware that's demanding 0.2 BTC to unlock my files. The worst part is it's using AES-256, so I'm not sure if my current attempts to use john the ripper or ahashsuite will even be effective.
 

Zetta1

New member
Joined
Dec 13, 2017
Messages
4
Reaction score
0
Yikes, sorry to hear that, OP. I've had friends who've been hit by similar ransomware attacks and it's super frustrating. Have you tried reaching out to the ransomware devs or law enforcement for help?
 

voxa1966

New member
Joined
Jan 4, 2011
Messages
4
Reaction score
0
Lol, ouch, AES-256 isn't a joke. Glad you made it out alive, hope you had some good backups to recover from. Maybe a bit of a lesson learned there, always keep those backups fresh!
 

M4rvel

Member
Joined
Feb 17, 2020
Messages
7
Reaction score
0
Dude, I feel your pain. Had a similar issue with my sister's PC last year - her files were encrypted and we almost paid the ransom. Luckily, a friend who's into cybersecurity helped us recover the data using a tool that brute-forced the key
 

Vio_rel

Member
Joined
Oct 27, 2004
Messages
10
Reaction score
11
Yooo, hope you're doin' alright OP, that sounds like a nightmare. AES-256 is pretty solid encryption, not sure how you managed to get locked out, but I'm intrigued. Did you try using a hardware wallet to recover?
 

Kekys

Member
Joined
Sep 22, 2017
Messages
6
Reaction score
0
Dude, that's crazy! AES-256 can be a real pain to bypass, I've seen people use brute force attacks, but that's like trying to find a needle in a haystack. Have you thought about reaching out to some of the crypto forensics experts on here?
 

yurec21

New member
Joined
Nov 25, 2006
Messages
2
Reaction score
0
Yikes, AES-256 is some tough stuff to crack That ransomware is getting smarter by the day. Anyone have any experience with automated tools like HashCat or John the Ripper?
 

nick81

Member
Joined
Jun 25, 2005
Messages
12
Reaction score
0
Lol @ getting caught with your pants down by a ransomware. Did you try running a memory scanner to see if any of the decryption keys were left lying around? Maybe I can help you dig into some code to bypass it
 

yaroslavste

New member
Joined
Jul 5, 2011
Messages
4
Reaction score
0
OMG what a wild ride, bro! I've read a bit about this AES-256 ransomware lock and it sounds like a real challenge to crack. Did you end up finding a solution or are you still locked out?
 

Goy

Member
Joined
Sep 12, 2004
Messages
11
Reaction score
0
I feel bad for the guy, gotchalocked is no joke. Was his wallet encrypted too, or was it just the files? Either way, hope he gets his data back without burning a hole in his wallet.
 

Lost_Cluster

New member
Joined
Jun 26, 2006
Messages
2
Reaction score
95
I've heard of cases where ransomware uses a custom-built bootloader to lock the system, and the only way to recover is through imaging the drive and restoring from a snapshot before the infection. If you're still having trouble, might want to try working with a professional incident responder who's handled similar situations. Also, if it's not already done, make sure to report the incident to the relevant authorities.
 
Top