Ragnarok
- First seen
- 2020-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 12:58:13
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications retail-and-hospitality manufacturing
Context
Ragnarok is is a ransomware that targetscorporate networks in Big Game Huntingtargeted attacks. The ransomware is associated with 'double-extortion' tactic, stealing and publishing files on a data leak site (DLS).
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Ragnarok_Auto (yara-rule)
Reports & references
- CrowdStrike — Report2021Gtr (report)
- docs.google.com — 1Mi8Z2Tbhmqq5X8Wf Ozv3Dvjz5Sjos 3 (report)
- news.sophos.com — The Ransomware Threat Intelligence Center (report)
- media.kasperskycontenthub.com — Common Ttps Of The Modern Ransomware Low Res (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ragnaro (report)
- borncity.com — Tu Darmstadt Opfer Der Ragnarok Ransomware (report)
- techcrunch.com — Ragnarok Ransomware Gang Shuts Down And Releases Its Decryption Key (report)
- cpomagazine.com — Ragnarok Ransomware Gang Closes Up Shop Leaves Master Decryptor Key Behind (report)
- sababasecurity.com — Cheese Shortage In Dutch Supermarkets After A Ransomware Attack (report)
- github.com — 2020 01 26 Ragnarok Cfg Vk.Notes.Raw (report)
- news.sophos.com — Asnarok2 (report)
- bleepingcomputer.com — Ragnarok Ransomware Releases Master Decryptor After Shutdown (report)
- bleepingcomputer.com — Ragnarok Ransomware Targets Citrix Adc Disables Windows Defender (report)
- ransomlook.io — Ragnarok (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ragnarok (report)
- tarlogic.com — Ragnarok Malware Stopper Vaccine (report)