05 Sep 2018

As soon as a new CryptoJoker Ransomware variant has been discovered which has been named as CryptoNar the security researchers have released a free decryptor almost instantly. This means that the affected users will be able to easily recover their files. The Ransomware was initially discovered by the MalwareHunterTeam and Michael Gillespie was fast to create a free decryptor for this ransomware.

How does CryptoNar Encrypts files?

CryptoNar encrypts files using various file formats. If the target file is a text or MD it will encrypt the entire file and attach the data to .fully.cryptoNar extension. While the remaining files will have a .partially.cryptoNar extension appended to the file’s name and after the encryption process the ransomware sends the private/public key pair to the attacker via Email.

How Does Victims Decrypt Their Files?

The Ransomware provides a ransom note named CRYPTONAR RECOVERY INFORMATION.txt containing the ransom amount of $200 worth of Bitcoin. The hacker has also directed the victims to enter their email ID and the listed ID in the extra note field of the Bitcoin transaction. Now decryptor launches and waits for the victim to enter the private key which they are supposed to get after making the payment. The free decryptor for CryptoNar will let the victims get their files back for free.

After downloading the decryptor, Run the file and Select Settings. Then select Brute Forcer and select the files to be decrypted, if the files are found select the file and hit the Decrypt Button.

 

Technical Writer,  Blogger,

Leave your thought

This site uses Akismet to reduce spam. Learn how your comment data is processed.