Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #6  
Old 06-23-2023, 06:35
silver silver is offline
Friend
 
Join Date: May 2017
Posts: 13
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 12
Thanks Rcvd at 4 Times in 4 Posts
silver Reputation: 0
Well, it depends if your data is valuable enough.

Most modern ransomware are a part of RaaS (Randomware as a Service), and authors are relatively "trustable", so you can pay them and get your files back. Nowadays it's basically impossible to crack a ransomware, because most flaws have been fixed, and those who cannot well encrypt your files are nearly all upgraded (unless you infected from a sample during 2016-2017.

I helped a few companies solving their ransomware issue back in 2015. One case I had dealt is having its private key XORed under C:\Temp\ntuser.dat (weird name, haha). Another case I had managed to do is solved by using the dump file, because the victim is a driver developer, and the ransomware incorrectly encrypted her configuration file for the device driver, so the kernel crashed in WinDBG.

However, modern ransomware can make correct assumption of which file should be encrypted, and carefully design their key function, so low hanging fruits have gone. Nowadays, all companies claiming they can solve the file, are mostly fraud.

Good luck
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Possible to open take command 10? neogen General Discussion 0 08-06-2009 20:30
try to open this with olly taos General Discussion 6 07-14-2005 07:58
File: *.htz ? (how to open it) hosiminh General Discussion 2 12-21-2004 06:17
confused!?!?!?! santa_kewl General Discussion 3 04-16-2004 22:32


All times are GMT +8. The time now is 23:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )