Bitcoin Forum

Hi everyone,
Recently I got access to an encrypted wallet.dat which contains 4000 Bitcoins. The problem is, the wallet is encrypted, and I don't have the coding skills to brute force it. Therefore, I am looking for someone who can help me with this. I know that the password is 9-10 characters long, contains "r", "u", "@" and "." and I know that the password is an email. Is this even worth decrypting? Or it is impossible to get the password just based on this information?

Any help is appreciated. Thanks!

There are lots and lots of such "wallets" on the internet. The problem usually is not that the wallet is encrypted. The problem usually is that it's a crafted wallet that doesn't actually contain anything meaningful that could get you anywhere near to any private key.

So if you bought this wallet, you most probably got scammed.
Even more, it's rather uncommon to have email address only 9-10 characters long. My shortest ever email address was 14 characters long.


This being said, I'll leave it to the others give you more technical details, since I don't have experience actually decoding / brute forcing wallets (I consider that a waste of time and resources).

From what you've stated so far at OP, from your OP down to your first comment, you've not stated or claimed this wallet address to be yours neither have you given any story as to how the forgetfulness came about. The most you've said is that, you got access to a wallet address and has guessed a build up pattern for the password.

The forum might be many things but, they won't be delighted helping you collect that which isn't rightfully yours if it is indeed positive and so, you might want to explain what's up with the address with a little convincing clarity.

Well, you gotta understand a few things:
1 - This wallet is publicly available, and cause of that, you are probably not the first one trying to brute force it.
2 - The coins are still in the wallet because of two possible options - the wallet file is fake - or the password is too hard to brute force. Say all the chars on the standard english keyboard layout are possibly in the password, and that's easily gets to a huge number of possibilities you can't even think about cracking. If you still wanna try, I can help you out, but don't expect it to work after a day or two letting your compiter run.

If you have a GPU, you should try Hashcat (Free & Open Source) or Passware lab kit (Paid, Closed Source).

If you have a CPU, You can also take a look at the oldie one, BTCRecover, or, johnny (John The Ripper) but, these are way slower, and useful only if you got a real clue about the password. If you want to try all the possible combinations, don't use them.

I had an idea for a really long time about creating a software that will split the work between different parties, trying to brute force the password.
I just wanna say that it is possible to implement some kind of a brute forcer, that will brute force the ckey/mkey, (these are the encrypted private keys, not the encrypted password) much faster than what Hashcat does for example.
By the way, Hashcat will ask you for a hash. Get that using a script named "bitcoin2john.py"

Who sent you the file and why would they trust somebody unexperienced to help with recovering almost $70,000,000

If you bought it or they gave it to you voluntarily and told you the password is an E-mail.  The shortest ending of an E-mail I can think of is @pm.me.  Maybe there are shorter ones available but I doubt it.  @pm.me is already 6 characters, only 3 to 4 are left to brute force it.  This is easy job for someone who knows how to do this kind of thing.

I call a big fat lie if that is what you have been told.

If the file is available on the Internet, free or not.  You are trying to brute force some body's fortune.  How does that make you feel.

-
Regards,
PrivacyG

I think you are on the wrong forum, though your topic is related to bitcoin, but its not a place where cracking is encouraged. And if you bought the encrypted wallet, you may have been scammed too. In addition, a forgotten key or dormant wallet helps the entire network, that is, we all benefit from the lost bitcoin, so trying to access it and remove the funds will as well affect us all. I think it's better you neglect the funds in the wallet and go work your way to earning 4000BTC. I think its a better way of contributing to the network than wasting time and money on someone else's fortune.

I hope you didn't pay for it. If you did, you have been scammed.

It is a fake wallet file, and you have been tricked into buying something that does not exist.

a fresh newbie account tries to tickle the whiskers of gullible people offering too much presumed value with hints of atleast 60% of the password

its already BEING TOO OBVIOUS!by hinting its a russian email address so guessing the characters after the @ and before the .ru becomes childs play of just probably 10 possible well know email provisors in russia

then the remaining characters are supposedly the characters before the @

its too obvious a scam carrot swinging near the noses of the gullible dimwhits thinking they are smart enough to solve it for quick riches


it seem "to good to be true" offering something so easy to brute.. meaning.. IT IS not true

usually when these scams are done by this method
they are "bought" or insured by the guy wanting to get a win(the gullible) who pays the scammer

the scammer is the one asking if someone can brute.. dangling a easy brute carrot
end result the guy making the topic runs off with a the gullible persons donation

These are almost scams in which you will get nothing because you are talking about 4000BTC which is worth billion dollars at this time so who would be willing to give you such encrypted files that actually have bitcoins in them and can be brute forced? So don't waste your time on them as if you take help also in decoding these files you won't get anything from them.

Assuming you haven't been scammed (which is unlikely!), it is not possible to brute force a passphrase that is 9-10 characters long since the permutation is just too huge (digit_length⁹ + digit_length¹⁰ = ~4e+18), your knowing 4 characters without knowing their position is not going to change anything.
Knowing the email domain (eg. gmail.com) would significantly reduce the size of the password although 9-10 chars total seems too short then.

Even if it isn’t a fake wallet file and is completely legitimate, the fact that it’s encrypted should be enough for you to know it isn’t worth your time. The wallet could be encrypted with a stronger password than the private key it’s safeguarding. It’s not like people go around handing out wallets with a ton of value and a weak encryption. That’s why everyone is saying the same thing, this is a waste of time and effort.

Large base - there are private + public wallets. All collected in one archive

https://goo.su/iNcUArW

I have some magic beans.  Would you be interested in buying them?

I get that spreadsheets are the only way to feasibly share this stuff for now, but long term, the future is centralized services with concentrated amounts of GPU power working on this kind of stuff.

Ever since ETH mining disappeared, you can get GPUs for real cheap since most ex-miners don't know what to do with their lot.

From my personal assumptions, you bought this wallet, if indeed you bought the wallet, so sorry to say but you've been scammed, without any knowledge of the password, your chances of ever gaining access into a wallet like this is lesser than 0.

I will just advice you stop chasing shadows and move on, if someone sold this wallet to you probably for a far lesser amount of what 4000 bitcoins are worth, you should have known its a scam, or if you indeed own this wallet, and you know the wallet password is an email address, this should have been easy for you to remember or atleast have a close guess at what the password is, or can you say you didn't remember an email address you created your self? Not even a close guess at it..? Not possible.

guys! all readers of this topic

its a scammer making this topic.
never trust a 0 activity username  whos only posts from recent registration is to be claiming they have a large stash of coins dangling infront of them that they want to give a file to some gullible forum reader to hope that you gullible readers will download and open for them

there is nothing more to say.

For sure there are people who would really be making out some PM's and trying out to be interested on helping OP and same as you said that there is indeed a high probability that this guy is really just luring those

users would be downloading something which trying to pretend on needing up some help but actually but having this hideous intent.So be aware for those people who are been trying out to deal with.

Its already common back in the past about wallet.dat files had been sold off and claiming to have lots of coins inside.If we do just think off sensibly or having the common sense
then why they would be needing to sell on something that cant be cracked?

the scam game is simple

the scammer puts a carrot tied to a string knot.. in the front of peoples noses with a hint on how to untie the knot that stops anyone just taking the carrot. making it seem hard but also simple(hints)..

they say the carrot is worth $65million and they want help from people to untie the knot for them

but the carrot owner dangling the carrot infront of people wants a 1-10% upfront deposit incase the person wanting to help unknot the carrot steals the carrot..

however its the guy dangling the carrot that takes the $650k-$6.5m "deposit" and leaves someone holding a carrot forth pennies not millions