Ransomware gang wanted $5.3 million from US city, but they only offered $400,000