1

One of my clients send me some picture that shows they infected by some ransomware. As i analysed i found that ransomware is probably Dharma ransomware, child of Crysis. so i tried to decrypt files with Kaspersky and avast tools but failed. Files renamed to some thing like :

test1.txt.id-XXX.[black.mirror@qq.com].java

The real file name was test1.text

I attacked ransomware screen . I need a tool to decrypt them for a decryption with master key for it?

closed as off-topic by schroeder Dec 13 '17 at 17:45

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Unfortunately, we are not a malware/ransomware removal forum. – schroeder Dec 13 '17 at 17:47
2

NoMoreRansom (link here) will help you with ransomware identification and relevant decryption steps. Here are all of their decryption tools: https://www.nomoreransom.org/en/decryption-tools.html

If you are sure that it is the Dharma ransomware then they have the steps to decryption listed here for that particular infection: https://www.nomoreransom.org/uploads/RakhniDecryptor_how-to_guide.pdf

Not the answer you're looking for? Browse other questions tagged or ask your own question.