Cybersecurity firm Avast has released a free tool that allows to recover files encrypted by the Hades ransomware.
Hades (aka MafiaWare666, JCrypt, RIP Lmao, BrutusptCrypt) is a ransomware strain written in the C# programming language, which files using the AES encryption and doesn’t contain any obfuscation or anti-analysis techniques.
Once the encryption process is completed, the ransomware displays a window with instructions on how to pay the ransom. The ransom price is relatively low, between $50 – $300 in Bitcoin. However, the researchers note, in some cases ransom demand have reached tens of thousands of dollars.
More technical details and a step-by-step guide on how to use the tool can be found here.