All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: GlobeImposter 2.0
PostPosted: January 24th, 2022, 15:40 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
Hi to all!

Please infos from decrypt files .lockis is ransomware GlobeImposter 2.0.?

_________________
Нет ничего невозможного


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 24th, 2022, 16:49 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 907
Location: Nederland
No decrypt AFAIK.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 24th, 2022, 16:53 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
sempre wrote:
Hi to all!

Please infos from decrypt files .lockis is ransomware GlobeImposter 2.0.?

or repair files?

_________________
Нет ничего невозможного


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 5:03 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 907
Location: Nederland
Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 9:31 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
Arch Stanton wrote:
Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file.


Hi!
Thanks for replys!

Partially encrypted!

Tool repair file. DB?

_________________
Нет ничего невозможного


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 9:45 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 907
Location: Nederland
What are you saying, you need to repair partially encrypted DB? I'll try to direct someone who may be able to help to this thread.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 9:55 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
Arch Stanton wrote:
What are you saying, you need to repair partially encrypted DB? I'll try to direct someone who may be able to help to this thread.

ok thanks!

_________________
Нет ничего невозможного


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 11:15 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3452
Location: Greece
GlobeImposter 2.0 is a copycat of Globe3 Ransomware.
It's not decryptable.

I've been messing around with this strain since it appeared and I've put a lot of effort to try and find a flaw in it (for personal reasons, one of my best friends got attacked and lost a lot of his work and personal data).

It's very, very secure. And very well-written.

HOWEVER, I was able to restore my friends' SQL database by 60-70% and I was able to recover a lot of his lost pictures and office docs.
Not a solid recovery, but better than nothing.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 25th, 2022, 15:07 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
northwind wrote:
GlobeImposter 2.0 is a copycat of Globe3 Ransomware.
It's not decryptable.

I've been messing around with this strain since it appeared and I've put a lot of effort to try and find a flaw in it (for personal reasons, one of my best friends got attacked and lost a lot of his work and personal data).

It's very, very secure. And very well-written.

HOWEVER, I was able to restore my friends' SQL database by 60-70% and I was able to recover a lot of his lost pictures and office docs.
Not a solid recovery, but better than nothing.


PM

_________________
Нет ничего невозможного


Top
 Profile  
 
 Post subject: Re: GlobeImposter 2.0
PostPosted: January 31st, 2022, 14:35 
Offline
User avatar

Joined: October 14th, 2005, 9:26
Posts: 1029
sempre wrote:
Arch Stanton wrote:
Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file.


Hi!
Thanks for replys!

Partially encrypted!

Tool repair file. DB?


Sorry, file repair name_file.db (not sql)

_________________
Нет ничего невозможного


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 21 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group