Skip to content
brandefense.io
Request A Demo
RansomwareUnknownIntermediate sophistication · Small team

Ragnarok

Ragnarok is a ransomware group, tracked by Brandefense. It targets the Construction and Real Estate, and Diplomacy sectors in Germany.

Also known as
  • Asnarok
  • Asnarök
  • Ragnarokfromasgard
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Dec 1, 2019
Last seen
Aug 1, 2020
Record updated

Who They Target.

Sectors · 2
Countries · 1
Labelsransomware

About Ragnarok.

According to Bleeping Computer, the ransomware is used in targeted attacks against unpatched Citrix servers. It excludes Russian and Chinese targets using the system's Language ID for filtering. It also tries to disable Windows Defender and has a number of UNIX filepath references in its strings. Encryption method is AES using a dynamically generated key, then bundling this key up via RSA.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.