A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #33155  by Fedor22
 Fri Aug 16, 2019 8:45 am
rammsteinse wrote: Fri Aug 16, 2019 1:46 am Hello, I infected with this ransomware sample "TeslaCrypt Ransomware.rar", some important files were encrypted, now they have the extension "ecc", I have tried several tools to decrypt and none has worked for me, I need help, some of these files are very important For me, PLEASE HELP.
Try to use TeslaDecoder, made by BloodDolly. Maybe this tool can help you.
Code: Select all
https://www.bleepingcomputer.com/news/security/teslacrypt-shuts-down-and-releases-master-decryption-key/
https://download.bleepingcomputer.com/BloodDolly/TeslaDecoder.zip
 #33156  by FakeAVHunter
 Fri Aug 16, 2019 10:10 am
No any attempt can decrypt the files seriously i've attached teslacrypt to debbuger so the keys of the version with .enc cannot do a decrypt process sirry :x :x :x :-(
 #33157  by Antelox
 Fri Aug 16, 2019 12:04 pm
rammsteinse wrote: Fri Aug 16, 2019 1:46 am Hello, I infected with this ransomware sample "TeslaCrypt Ransomware.rar", some important files were encrypted, now they have the extension "ecc", I have tried several tools to decrypt and none has worked for me, I need help, some of these files are very important For me, PLEASE HELP.
Hi,

It should be version 1. Follow one of the following how-tos:
Code: Select all
https://www.nomoreransom.org/uploads/TrendMicro_how-to_guide.pdf
https://talosintelligence.com/teslacrypt_tool
BR,

Antelox
  • 1
  • 3
  • 4
  • 5
  • 6
  • 7