YARA rules for Prolock
3 rules from 3 sources detect Prolock. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware.
Family grouping is heuristic: check each rule's description.
Scan files with all Prolock rulesSearch rules
Detects Prolock malware in encrypted and decrypted mode
MalwareSignature Base (Florian Roth / Nextron)· Frank Boldewin (@r3c0nst)· 2020-05-17ProLock ransomware payload
MalwareditekSHen detection· ditekSHen· 2020-11-06- R3C0NST_Prolock_MalwareMetadata only
Detects Prolock malware in encrypted and decrypted mode
MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2020-05-17