2 min read

WannaRen Decryption Tool

Bitdefender

August 19, 2020

WannaRen Decryption Tool

A decryptor for the WannaRen ransomware is now available for download.

Initially spotted in April 2020, WannaRen is mostly spreading through websites offering “cracked” software. This new decryptor works on all known versions of WannaRen ransomware.

How to use this tool

Step 1: Download the decryption tool below

Download the WannaRen decryptor

Save it somewhere on your computer. The tool doesn’t require an active internet connection.

Step 2: Double-click the file (previously saved as BDWannaRenDecryptor.exe) and let it run by clicking Yes in the UAC prompt.

Step 3: Select “I Agree “for the End User License Agreement

Step 4: The pop-up window will warn you that you need a few pairs of clean and encrypted files in a test folder. At this point, we can only decrypt files smaller or equal in size as the largest pair of clean/infected files.

Step 5: Select the “Scan Entire System” option if you want the tool to search for all encrypted files.

We strongly recommend that you also select “Backup files.”

The “test folder” must contain a few pairs of encrypted/not-encrypted files.

Download the WannaRen decryptor

tags


Author



Right now

Top posts

LuminousMoth – PlugX, File Exfiltration and Persistence Revisited

LuminousMoth – PlugX, File Exfiltration and Persistence Revisited

July 21, 2021

9 min read
How We Tracked a Threat Group Running an Active Cryptojacking Campaign

How We Tracked a Threat Group Running an Active Cryptojacking Campaign

July 14, 2021

10 min read
A Note from the Bitdefender Labs Team on Ransomware and Decryptors

A Note from the Bitdefender Labs Team on Ransomware and Decryptors

May 26, 2021

2 min read
New Nebulae Backdoor Linked with the NAIKON Group

New Nebulae Backdoor Linked with the NAIKON Group

April 28, 2021

1 min read
Good riddance, GandCrab! We’re still fixing the mess you left behind.

Good riddance, GandCrab! We’re still fixing the mess you left behind.

June 17, 2019

5 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

LuminousMoth – PlugX, File Exfiltration and Persistence Revisited LuminousMoth – PlugX, File Exfiltration and Persistence Revisited
Bogdan BOTEZATUVictor VRABIE
9 min read
Debugging MosaicLoader, One Step at a Time Debugging MosaicLoader, One Step at a Time
Janos Gergo SZELESBogdan BOTEZATU
1 min read
How We Tracked a Threat Group Running an Active Cryptojacking Campaign How We Tracked a Threat Group Running an Active Cryptojacking Campaign
Bitdefender

July 14, 2021

10 min read