Possible Ransomware / Wannacry Decrypter

Ransomware / wannacry

In the last few hours a decrypter tool has been released able to decrypt data encrypted by Ransomware / Wannacry.

 

Following you can find links for tool and release:

https://github.com/gentilkiwi/wanakiwi

https://github.com/gentilkiwi/wanakiwi/releases

 

Tool is able to decrypt data on these following S.O.:

  • Windows XP
  • Windows Server 2003
  • Windows Vista
  • Windows 7
  • Windows Server 2008

 

“Decryption” can be done only if these conditions are respected:

  • The infected machine shouldn’t have been reboot
  • Execute tool as soon as possible, because software uses RAM “memory” to retrieve decrtyption for decrypt data

 

You can find further information at the following link:

https://blog.comae.io/wannacry-decrypting-files-with-wanakiwi-demo-86bafb81112d