Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Ragnarlocker

No description available.

Victims

128

First Discovered

2020-04-01

victim

Last Discovered

2023-10-11

victim

Inactive Since

2yrs

more than

Avg Delay

10

days

Infostealer

0.0%

victims with domain

View Victims on World Map

View group statistics

Known Locations (4)

Favicon	Title	Type	Available	Last Visit	Server Info	FQDN
	None		No	2025-06-01 21:19:12		`rgleak7op734elep.onion`
	This site has been seized		Yes	2026-03-19 08:31:33	nginx 1.28.2	`rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion`
	None		No	2025-06-01 21:20:46		`p6o7m73ujalhgkiv.onion`
	This site has been seized		Yes	2026-03-19 08:01:31	nginx 1.28.2	`ragnarnwvli32xnmwudsvhbl7klzmofxeylyhcqfc5ifx5mbybq3ekqd.onion`

Target (Available)

Heatmap (Available)

Ransom Notes (2)

Tools Used (Available)

This information is provided by Ransomware-Tool-Matrix
Discovery	RMM Tools	Defense Evasion	Credential Theft	OffSec	Networking	LOLBAS	Exfiltration
Advanced Port Scanner Dsquery PsInfo SoftPerfect LanSearchPro	AnyDesk Remote Manipulator System (RMS) RemoteUtilities placeholder	VirtualBox placeholder placeholder placeholder	placeholder placeholder placeholder placeholder	Cobalt Strike placeholder placeholder placeholder	placeholder placeholder placeholder placeholder	PsExec WMIC placeholder placeholder	placeholder placeholder placeholder placeholder

Vulnerabilities Exploited (0)

TTPs Matrix (0)

Negotiation Chats (0)

YARA Rules (1)

Indicators of Compromise (IoCs) (0)

Victims (128)