hashcat Forum
Blockchain v1 wallet.aes.json issues - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Blockchain v1 wallet.aes.json issues (/thread-10315.html)



Blockchain v1 wallet.aes.json issues - dooferorg - 09-01-2021

Hi,

I've read on this site and others about using hashcat to gain access to old wallet.aes.json files. I have a few from 2012,2013 when I was tinkering with bitcoin and I'm trying to see if I can find any funds from them. Likely not but worth a try.

I have looked at btcrecover but since I don't really know anything of the password I came across hashcat.

With the wallet.aes.json file I have tried using the python script 'blockchain2john.py' and made a wallet.hash file that I am attempting to feed to hashcat.

If I specify the mode of 12700 
Code:
hashcat.exe -m 12700 wallet.hash
I get 'Signature unmatched'

If I specify no mode at all 
Code:
hashcat.exe wallet.hash
I get 'no hash-mode matches the structure of the input hash'

If I try the wallet.aes.json file directly like:
Code:
hashcat.exe -m 12700 -a 3 -O -w 3 wallet.aes.json --show
I get 'Separator unmatched'

The first few characters of the 'wallet.hash' file is:

Code:
wallet.aes.json:$blockchain$2688$63522b4b56472f38597

I'd like to ask for some thoughts on this as to what I'm doing wrong and how best to attack the problem since I'm confused on how to progress.

Thanks in advance.


RE: Blockchain v1 wallet.aes.json issues - Snoopy - 09-03-2021

take a look at https://hashcat.net/wiki/doku.php?id=example_hashes

example hash for mode 12700 starts with -> $blockchain$288$542005582723173071...

so delete this wallet.aes.json: in front and try again


RE: Blockchain v1 wallet.aes.json issues - ozzydodah69 - 11-16-2021

You dont need the password to see the funds in a wallet.  Extract the wallet address(es) and search the blockchain