Netskope Threat Labs

Prometheus

ATP Sandbox Adv. HeuristicsAV

Prometheus is a .NET ransomware apparently derived from the Hakbit (Thanos) ransomware code base.

First seen
December 2022
Last seen
October 2026
Alert Name
ByteCode-MSIL.Ransomware.Prometheus
Document-HTML.Trojan.Prometheus
Document-PDF.Ransomware.Prometheus
Email-MIME.Trojan.Prometheus
Gen:Variant.Ransom.Prometheus.1
Gen:Variant.Ransom.Prometheus.2
Script.Ransomware.Prometheus
Trojan.Ransom.Prometheus.A
Trojan.Ransom.Prometheus.B
Win32.Ransomware.Prometheus