Prinz Eugen ransomware servertool.exe file encryption with .prinzeugen extension
Detects the activity of the Prinz Eugen ransomware, specifically tracking the execution of 'servertool.exe' as it creates temporary files with the '.prinzeugen.tmp' extension and subsequently renames them to finalize file encryption.
YARA-L
