Ransomware.live: promptlock

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

First known AI-powered ransomware. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly

YARA Rules (1)

Indicators of Compromise (IoCs) (6)

Hash SHA1 6

Type	IOC
`Hash SHA1`	`161CDCDB46FB8A348AEC609A86FF5823752065D2`
`Hash SHA1`	`24BF7B72F54AA5B93C6681B4F69E579A47D7C102`
`Hash SHA1`	`639DBC9B365096D6347142FCAE64725BD9F73270`
`Hash SHA1`	`AD223FE2BB4563446AEE5227357BBFDC8ADA3797`
`Hash SHA1`	`BB8FB75285BCD151132A3287F2786D4D91DA58B8`
`Hash SHA1`	`F3F4C40C344695388E10CBF29DDB18EF3B61F7EF`

Promptlock

YARA Rules (1)

Indicators of Compromise (IoCs) (6)