Recently I got access to an encrypted wallet.dat which contains 4000 Bitcoins. The problem is, the wallet is encrypted
There are lots and lots of such "wallets" on the internet. The problem usually is not that the wallet is encrypted. The problem usually is that it's a crafted wallet that doesn't actually contain anything meaningful that could get you anywhere near to any private key.
So if you bought this wallet, you most probably got scammed.
Even more, it's rather uncommon to have email address only 9-10 characters long. My shortest ever email address was 14 characters long.
This being said, I'll leave it to the others give you more technical details, since I don't have experience actually decoding / brute forcing wallets (I consider that a waste of time and resources).