1

One of my clients send me some picture that shows they infected by some ransomware. As i analysed i found that ransomware is probably Dharma ransomware, child of Crysis. so i tried to decrypt files with Kaspersky and avast tools but failed. Files renamed to some thing like :

test1.txt.id-XXX.[black.mirror@qq.com].java

The real file name was test1.text

I attacked ransomware screen . I need a tool to decrypt them for a decryption with master key for it?

Morteza Soltanabadiyan
  • 111
  • 3

1 Answers1

2

NoMoreRansom (link here) will help you with ransomware identification and relevant decryption steps. Here are all of their decryption tools: https://www.nomoreransom.org/en/decryption-tools.html

If you are sure that it is the Dharma ransomware then they have the steps to decryption listed here for that particular infection: https://www.nomoreransom.org/uploads/RakhniDecryptor_how-to_guide.pdf

whoami
  • 1,366
  • 10
  • 17