Thorchain Wallet Support with lost passphrase

[bhi56]

[
Its not a .dat file, its the keystore.json and below is a known keystore.json. Its an empty wallet but if we can get hashcat to run on this, i can take it from there.

quote="hm-001" pid='52245' dateline='1618808228']
sorry to hear that. ill try to help. do the you have the dat file?

Hello - I did something really stupid for a friend and lost their funds. I was on their windows machine and has temporarily written their seed and password in a notepad to be transferred later.

Right in the middle as we weren't paying attention for 5 min after funds were transferred, the machine decided to do an auto-update. It restarted and we lost the notepad doc.

fortunately, i have the keystore but being that it's a thorchain wallet I'm not sure how to get this into a useable format for hashcat.

here is a sample empty wallet hash and was wondering if someone could help me get this into a usable file so i can process with hashcat.

Code:

{"crypto":{"cipher":"aes-128-ctr","ciphertext":"4f1464c43704d6d4eb655aae2f1adb31d4ebe53fbdffdd88ef9debfdd51b96ba6d399847e04e2a66cd60a2d95c721f9cdf4c3d107dfec61e4d95d6b2bd1ff1130bf7c715da6f5c39c9b61e92b5d5","cipherparams":{"iv":"f07c8793a54e4d413a3ae0bf0e26570a"},"kdf":"pbkdf2","kdfparams":{"prf":"hmac-sha256","dklen":32,"salt":"49d7cca0ad195b43bc48fa3581018b59a27d5a1ed3bf83e8fbe349868fabc850","c":262144},"mac":"7179d6b1eb3bcd36db74cee64d11682b720ec643f58367cf592ac351842fee24"},"id":"8c3a7bde-30a2-49c1-9bae-0ab2d7a7ebe6","version":1,"meta":"xchain-keystore"}

FWIW - the password to this is bit and its an empty wallet to see if i could break a simple password first. If someone should use this to test the right format and tell me which hashmode to run, that would be great!

Promise to somehow repay a favor and send a box of Hawaii snacks and stuff to the person/people that help me get it to a point where I can run hashcat against this.

[/quote]