Emsisoft Decrypter for HydraCrypt and UmbreCrypt can decrypt files infected with these two ransomware's, which are similar to CrypBoss.

Emsisoft discovered these two new malware families being distributed via exploit kits earlier this month and it turns out that both families are closely related to the CrypBoss, ransomware family. Since their source code was leaked onto the internet last year, this comes as no surprise.

This new variant causes up to 15 bytes at the end of the file to be damaged irrecoverably. Most file formats this isn't crucial so it can be recovered by just opening and saving the files. For other file formats, you won't be so lucky.

In order to determine the correct decryption key for your system, the decrypter will require some help from you. Look for any encrypted file on your system, where you have the original unencrypted version of the file as well. Select, drag and drop both the unencrypted and encrypted files at the same time onto the decrypter executable as shown here:



The decrypter will try to determine the encryption key for your system based on the two files you provided. This can be rather time-consuming and can take up to several days.