From 7aaf25a424912a2daa71b4e98f818f4aa5f00baf Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Fri, 30 Apr 2021 12:08:03 +0200
Subject: [PATCH] new: [ransomware] Ragnarok added

---
 clusters/ransomware.json | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 4a14669..c814121 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -24191,7 +24191,23 @@
       },
       "uuid": "f84b92bb-d8e8-4ddd-848c-1a91df504e8e",
       "value": "DEcovid19"
+    },
+    {
+      "description": "Ragnarok is is a ransomware that targetscorporate networks in Big Game Huntingtargeted attacks. The ransomware is associated with 'double-extortion' tactic, stealing and publishing files on a data leak site (DLS).",
+      "meta": {
+        "encryption": "AES",
+        "extensions": [
+          ".ragnarok",
+          ".ragnarok_cry"
+        ],
+        "refs": [
+          "https://malpedia.caad.fkie.fraunhofer.de/details/win.ragnaro",
+          "https://borncity.com/win/2021/03/27/tu-darmstadt-opfer-der-ragnarok-ransomware/"
+        ]
+      },
+      "uuid": "fe7e4df0-97b9-4dd2-b3f8-79404fc8272d",
+      "value": "Ragnarok"
     }
   ],
-  "version": 96
+  "version": 97
 }