MITRE ATT&CKsoftware (malware)

S0654 ProLock

Published 2021-09-30 Modified 2024-11-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2021-09-30

Description

ProLock is a ransomware strain that has been used in Big Game Hunting (BGH) operations since at least 2020, often obtaining initial access with QakBot. ProLock is the successor to PwndLocker ransomware which was found to contain a bug allowing decryption without ransom payment in 2019.

Related

Uses · MITRE ATT&CK (7)

  • T1027.003 Steganography sub-technique
  • T1070.004 File Deletion sub-technique
  • T1490 Inhibit System Recovery technique
  • T1486 Data Encrypted for Impact technique
  • T1197 BITS Jobs technique
  • T1047 Windows Management Instrumentation technique
  • T1068 Exploitation for Privilege Escalation technique

References