Bitcoin Forum
May 14, 2024, 07:02:05 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Need help with a 6year old file related to Bitcoin keys  (Read 93 times)
Deadrisinghelp (OP)
Newbie
*
Offline Offline

Activity: 93
Merit: 0


View Profile
April 15, 2021, 10:58:31 PM
 #1

Hello, i got a file named "Name-23423423.key" that my friend sent me, apperently he used this file to get his BTC 6 years ago, can anyone shed some light on this file ? friend is dead by the way so i can't ask him anymore sadly.
1715670125
Hero Member
*
Offline Offline

Posts: 1715670125

View Profile Personal Message (Offline)

Ignore
1715670125
Reply with quote  #2

1715670125
Report to moderator
1715670125
Hero Member
*
Offline Offline

Posts: 1715670125

View Profile Personal Message (Offline)

Ignore
1715670125
Reply with quote  #2

1715670125
Report to moderator
Bitcoin addresses contain a checksum, so it is very unlikely that mistyping an address will cause you to lose money.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715670125
Hero Member
*
Offline Offline

Posts: 1715670125

View Profile Personal Message (Offline)

Ignore
1715670125
Reply with quote  #2

1715670125
Report to moderator
1715670125
Hero Member
*
Offline Offline

Posts: 1715670125

View Profile Personal Message (Offline)

Ignore
1715670125
Reply with quote  #2

1715670125
Report to moderator
ranochigo
Legendary
*
Offline Offline

Activity: 2968
Merit: 4186



View Profile
April 15, 2021, 11:02:47 PM
Merited by Coding Enthusiast (1)
 #2

.key extension was most commonly used with Multibit. If you were to open the wallet file with a text editor, are there any human readable parts? It should contains some references to Bitcoin addresses, they're around 34 characters long and starts with 1.

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
Deadrisinghelp (OP)
Newbie
*
Offline Offline

Activity: 93
Merit: 0


View Profile
April 15, 2021, 11:06:14 PM
 #3

.key extension was most commonly used with Multibit. If you were to open the wallet file with a text editor, are there any human readable parts? It should contains some references to Bitcoin addresses, they're around 34 characters long and starts with 1.

i opened it with notepad, it a well strucktured block of text, but no adresses. might be encrypted, is there anyway i can use this .KEY with Multibit and Bruteforce it using my GPU farm ?
Deadrisinghelp (OP)
Newbie
*
Offline Offline

Activity: 93
Merit: 0


View Profile
April 15, 2021, 11:07:48 PM
 #4

.key extension was most commonly used with Multibit. If you were to open the wallet file with a text editor, are there any human readable parts? It should contains some references to Bitcoin addresses, they're around 34 characters long and starts with 1.

i never used multibit, but it does ring a bell, he might've used that wallet now that i think about it.
Deadrisinghelp (OP)
Newbie
*
Offline Offline

Activity: 93
Merit: 0


View Profile
April 15, 2021, 11:23:53 PM
 #5

.key extension was most commonly used with Multibit. If you were to open the wallet file with a text editor, are there any human readable parts? It should contains some references to Bitcoin addresses, they're around 34 characters long and starts with 1.


okey i actually managed to download MultiBit Classic version 0.5.19, when i click on "import private keys" i can select from files, and the only files showing up is the .key file. so i'm guessing you're right that Multit was used. however it looks like it's encrypted.
HCP
Legendary
*
Offline Offline

Activity: 2086
Merit: 4316

<insert witty quote here>


View Profile
April 15, 2021, 11:26:13 PM
Merited by ABCbits (1)
 #6

Does the text start with "U2F" and look something like this:
Code:
U2FsdGVkX18LSYm98B5HRgLWHgx35xMcsSpjjtdC9XG6iEYh9OC+vfyQA1fNmjEKs64cm/bntH7g
/AMeb5NNSEe9hzYAgp/DRvOR+GX9E95pGcl4Gb2AHGMyUfAww7uV

If so, then it could be a MultiBit .key file... which means it is AES256 encrypted text... if you don't know the password, then you'd have to attempt to bruteforce it... which could be problematic if your dead friend used a long complex password.

Your options would be btcrecover (https://github.com/3rdIteration/btcrecover/) or hashcat (https://hashcat.net/hashcat/) and use the "multibit2john" script to extract the hash from the .key file and then bruteforce the hash using hashcat.

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
Deadrisinghelp (OP)
Newbie
*
Offline Offline

Activity: 93
Merit: 0


View Profile
April 15, 2021, 11:36:19 PM
 #7

Does the text start with "U2F" and look something like this:
Code:
U2FsdGVkX18LSYm98B5HRgLWHgx35xMcsSpjjtdC9XG6iEYh9OC+vfyQA1fNmjEKs64cm/bntH7g
/AMeb5NNSEe9hzYAgp/DRvOR+GX9E95pGcl4Gb2AHGMyUfAww7uV

If so, then it could be a MultiBit .key file... which means it is AES256 encrypted text... if you don't know the password, then you'd have to attempt to bruteforce it... which could be problematic if your dead friend used a long complex password.

Your options would be btcrecover (https://github.com/3rdIteration/btcrecover/) or hashcat (https://hashcat.net/hashcat/) and use the "multibit2john" script to extract the hash from the .key file and then bruteforce the hash using hashcat.

yes it does! thanks! so that means it really is Multibit! thanks! i'm going to give Hashcat a try first, i don't think he used a complex password at all, but we'll see
thanks for all the help!
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!