Found old wallet.dat file but wallet is encrypted

collda · May 12, 2019, 12:06pm

Hi,

I have found an old wallet.dat file when clearing out my old HDD’s. It looks like wallet backup files from 2013-2014 with the format LTC28112013.

I installed the latest litecoin wallet on my windows machine and added the file and renamed it wallet.dat and the client updated including all the coins in the wallet. Problem is the wallet is encrypted, its asking for the wallet passphrase when i try to transfer the contents of the wallet. Is there anyway around this?

Regards

collda

mautematico · June 23, 2019, 5:57am

didn’t the latest version had issues with file format being too old?

Without the passphrase, you cannot move the coins, since passphrase is used to store an encrypted copy ofthe pprivate keys.

You could try brute forcing it, if you have clues on what the passphrase could be.

collda · June 23, 2019, 7:57pm

Hi,

I manged to open a 2013 wallet.dat file with the current wallet software and it worked fine. it rebuilt and found all my coins. when i tried to transfer them out that’s when i got stuck with the passphase prompt.

I tried getting hashcat to find the keys to bruteforce them, but it doesn’t seem to be able to locate them in the wallet.dat file. I opened the wallet.dat file inside atom but couldn’t really work out what was going on in the file or anything that looked like a hash…so kinda stuck.

Got some mining GPU available that i can re-task to do the cracking but i can’t locate a hash.

mautematico · June 23, 2019, 8:13pm

You could use bitcoin2john to extract the hash from wallet.dat

I think this is it

github.com

openwall/john/blob/bleeding-jumbo/run/bitcoin2john.py

#!/usr/bin/env python

# This software is
# Copyright (c) 2012-2018 Dhiru Kholia <dhiru at openwall.com>
# Copyright (c) 2019 Solar Designer
# Copyright (c) 2019 exploide
# Redistribution and use in source and binary forms, with or without
# modification, are permitted.  (This is a heavily cut-down "BSD license".)
#
# While the above applies to the stated copyright holders' contributions,
# this software is also dual-licensed under the MIT License, to be certain
# of license compatibility with that of the components listed below.
#
# This script (bitcoin2john.py) might still contain portions of jackjack's
# pywallet.py [1] which is forked from Joric's pywallet.py whose licensing
# information follows,
#
# [1] https://github.com/jackjack-jj/pywallet
#
# PyWallet 1.2.1 (Public Domain)

This file has been truncated. show original

python bitcoin2john.py wallet.dat > wallet.hash
after that, you could hashcat with mode 11300 (IIRC) over the wallet.hash file

collda · June 24, 2019, 9:54pm

Cheers, will give that a try…