S0654 ProLock

malwareEnterprise

platformsWindows

also known asProLock

ProLock is a ransomware strain that has been used in Big Game Hunting (BGH) operations since at least 2020, often obtaining initial access with QakBot. ProLock is the successor to PwndLocker ransomware which was found to contain a bug allowing decryption without ransom payment in 2019.

techniques used (7)

ATT&CK techniques this enables or maps to.

T1027.003Steganography
T1047Windows Management Instrumentation
T1068Exploitation for Privilege Escalation
T1070.004File Deletion
T1197BITS Jobs
T1486Data Encrypted for Impact
T1490Inhibit System Recovery

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan