Help to recover BTC

[jojo18]

Hi all,

In 2013 i purchased some BTC. From the guy that sold me i have recieved some text and password which i needed to decrypt and then create wallet. I had instructions but deleted form HDD. Can somebody help me how can I decrypt this text in usable format? I know that I needed to download some program from github if I recall but I do not know the details.

Thanks

Regards

[1714818299]

1714818299

[LoyceV]

some text and password

This is quite vague
Does it match any of the descriptions on [overview] Recover Bitcoin from any old storage format?

If you're lucky, it's just BIP38 encrypted:

BIP38 password encrypted private key (58 characters base58, starting with "6P", see bitaddress.org, click Wallet Details).
Example: 6PRNqE9p5hTUgNy5cxXnrfVKZPX5Qz8sqB7oNfDT9N3YdCM7rqRxruxkN1

Warning: Don't enter your "text" on any online website, and don't trust any PM-offers to "help" you!

[OmegaStarScream]

Hi all,

In 2013 i purchased some BTC. From the guy that sold me i have recieved some text and password which i needed to decrypt and then create wallet. I had instructions but deleted form HDD. Can somebody help me how can I decrypt this text in usable format? I know that I needed to download some program from github if I recall but I do not know the details.

I'm not sure I get this. Have you received the text + password from the person who sold you the bitcoins? Does that mean that he has them as well?

[jojo18]

some text and password

This is quite vague
Does it match any of the descriptions on [overview] Recover Bitcoin from any old storage format?

If you're lucky, it's just BIP38 encrypted:

BIP38 password encrypted private key (58 characters base58, starting with "6P", see bitaddress.org, click Wallet Details).
Example: 6PRNqE9p5hTUgNy5cxXnrfVKZPX5Qz8sqB7oNfDT9N3YdCM7rqRxruxkN1

Warning: Don't enter your "text" on any online website, and don't trust any PM-offers to "help" you!

I tried this but non of the mentioned types help me...

[mocacinno]

Maybe the lenght of this "text", the first character, the last character and potentially some description of the character set might be usefull (for example, only capital letters, alphanumeric,...).
Don't post the rest of the "text" tough, don't give it using a PM either... In case your seller used a weak encryption scheme, sharing the "text" might lead to loss of funds...

I'm not sure if anybody will be able to help you, but the description "some text" defenatly isn't enough...

[jojo18]

Hi all,

In 2013 i purchased some BTC. From the guy that sold me i have recieved some text and password which i needed to decrypt and then create wallet. I had instructions but deleted form HDD. Can somebody help me how can I decrypt this text in usable format? I know that I needed to download some program from github if I recall but I do not know the details.

I'm not sure I get this. Have you received the text + password from the person who sold you the bitcoins? Does that mean that he has them as well?

I hope not I was long time ago. I remeber that I recieved instructions on what to do with this text. I forgot that I have text and pass and even deleted it from hd. Last week i managed to restore file but still searching for this instructions

Maybe the lenght of this "text", the first character, the last character and potentially some description of the character set might be usefull (for example, only capital letters, alphanumeric,...).
Don't post the rest of the "text" tough, don't give it using a PM either... In case your seller used a weak encryption scheme, sharing the "text" might lead to loss of funds...

I'm not sure if anybody will be able to help you, but the description "some text" defenatly isn't enough...

The text has 76 signs. Starts with AAQ and has + sign. Also has upper and lower case and numbers and 12 charecters pass.

Maybe this was some kind of scam but I can not leave potential BTC left.

I have hope until I run out of options or see that balance is 0

Maybe the lenght of this "text", the first character, the last character and potentially some description of the character set might be usefull (for example, only capital letters, alphanumeric,...).
Don't post the rest of the "text" tough, don't give it using a PM either... In case your seller used a weak encryption scheme, sharing the "text" might lead to loss of funds...

I'm not sure if anybody will be able to help you, but the description "some text" defenatly isn't enough...

The text has 76 signs. Starts with AAQ and has + sign. Also has upper and lower case and numbers and 12 charecters pass.

Maybe this was some kind of scam but I can not leave potential BTC left.

I have hope until I run out of options or see that balance is 0

Also what I remembered is with this text I somehow create wallet.dat file and then replace it in folder of Bitcoin core wallet.

[moderator's note: consecutive posts merged]

[LoyceV]

The text has 76 signs. Starts with AAQ and has + sign. Also has upper and lower case and numbers and 12 charecters pass.

The "+" sounds like a signed message, but that would be 88 characters. Does it end on "="?

Example of a signature:

GyW/J8h97Y4/8z9HbJEjT7ZYcq5OhrBc73m5MNle0iYPZT5yGXaSBHM+4lt/DGWrGs+swM6fHA4FaOWBTRyJVtg=

76+12=88! Coincidence?

Also what I remembered is with this text I somehow create wallet.dat file and then replace it in folder of Bitcoin core wallet.

As far as I know you can't create a wallet.dat file from text. It could be your password works on that wallet.dat, but in that case you definitely need to find the file.

Please edit your posts instead of making multiple posts in a row (see forum rules).

[jojo18]

The text has 76 signs. Starts with AAQ and has + sign. Also has upper and lower case and numbers and 12 charecters pass.

The "+" sounds like a signed message, but that would be 88 characters. Does it end on "="?

Example of a signature:

GyW/J8h97Y4/8z9HbJEjT7ZYcq5OhrBc73m5MNle0iYPZT5yGXaSBHM+4lt/DGWrGs+swM6fHA4FaOWBTRyJVtg=

76+12=88! Coincidence?

Also what I remembered is with this text I somehow create wallet.dat file and then replace it in folder of Bitcoin core wallet.

As far as I know you can't create a wallet.dat file from text. It could be your password works on that wallet.dat, but in that case you definitely need to find the file.

Please edit your posts instead of making multiple posts in a row (see forum rules).

No there is * at the end of the pass but there is no =

[HCP]

I honestly don't see how you could get a wallet.dat from only 76 chars... that seems highly unlikely

More likely that what you have is a single private key that has been encoded in some manner. The good news is that at least you have the password. The bad news is that you have no idea what encryption method has been used.

No there is * at the end of the pass but there is no =

Text that starts "AAQ" and ends with a "*" doesn't sound like the "usual" Base64 encoding of ciphertext, as Base64 usually ends with "=" characters... not that it would really make any different, as even if it was Base64, there is still no way to know what the actual encryption algorithm was

[jojo18]

Ok i have rememberd something

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet. But do not know what to do with recieved text

[LoyceV]

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet.

Did you import the private key into Bitcoin Core (bitcoin-qt)?
I'm not sure if pywallet can do this, it could be. But it sounds like you've used bitcoinadress.org to create a private key. Maybe you're holding a brainwallet.
Once you've recovered the private key, you can forget about pywallet and wallet.dat files and just choose which wallet to use.

[jojo18]

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet.

Did you import the private key into Bitcoin Core (bitcoin-qt)?
I'm not sure if pywallet can do this, it could be. But it sounds like you've used bitcoinadress.org to create a private key. Maybe you're holding a brainwallet.

I can not remember  I will try to remember and keep you up to date

[DaveF]

Possibly a brainwallet?
I don't remember if they have the ability to add a password to the passphrase.
I'm on mobile at the moment at can't check.

Only other thought was some webwallet, since there used to be a lot of them out there.

-Dave

[HCP]

PyWallet (at least the "web" version) was indeed able to "edit" wallet.dat files... you could import and delete keys and addresses, in addition to the "dump" functionality.


source


I'm still confused by the character set used... it almost seems like Base64... except for that * character?!??

[jojo18]

I have checked and its not the brain wallet

it would be easier if I havent deleted instructions 

Now I can only guess what to do with recieved text

[LoyceV]

it would be easier if I havent deleted instructions 

Any chance you can still reach the guy who sold you the coins?

[jojo18]

it would be easier if I havent deleted instructions 

Any chance you can still reach the guy who sold you the coins?

Unfortunately no. I have deleted this messages along time ago 

[HCP]

what are the exact first 4 characters and the exact last 4 characters of your "text"? I've been trying to figure out what format it is in... and I'm wondering if there is more to this that we realise from your description.

Again, obviously, don't post the whole thing as it is apparently only protected by a 12 character password

[jojo18]

what are the exact first 4 characters and the exact last 4 characters of your "text"? I've been trying to figure out what format it is in... and I'm wondering if there is more to this that we realise from your description.

Again, obviously, don't post the whole thing as it is apparently only protected by a 12 character password

this is what the tex looks like

AQAAxxxxxxx+AAUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxR0RR

xxxx are numbers and letters no other signs

[HCP]

No there is * at the end of the pass but there is no =

Oh snap... I just realised you said the * was at the end of the "pass"!   I'm an idiot!

this is what the tex looks like

AQAAxxxxxxx+AAUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxR0RR

xxxx are numbers and letters no other signs

It likely is a Base64 representation of some encoded text... I was experimenting here: https://encode-decode.com/blowfish-encrypt-online/

and discovered that with a 12 character password ("password1234"), there are several encryption algorithms like Blowfish, des, cast etc that return 76 character encrypted text when you encrypt a private key.

ie. Blowfish:

Code: (private key)

L5RGSf2pShsFAbtUXeQwdsCWWuo4qLkaVaSJX2nVCTupAxhCU3Gk

Code: (password)

password1234

Code: (blowfish cipher text)

BT33LMVnYpnNk+eCy32KI3aQaBzeH8TQZtUvs0WZ1TO5ndJGiBP0JcnNq9WsKRNH8icgHWeCbAQ=

Now, I DO NOT recommend that you go an put your cipher text and password into some random encoder/decoder website like this... but it might be worth seeing if you can find some reputable encryption tools that you can use to try testing various encryption algorithms with your cipher text+password.