{"group":"ragnarok","count":1,"rules":[{"rule_name":"ragnarok.yar","rule_text":"/*\nRagnarok ransomware\n*/\n\nrule Ragnarok_Ransomnote\n{\n    meta:\n        author = \"ransomware.live\"\n        family = \"ransomware.ragnarok\"\n        description = \"Detects Ragnarok ransomware ransom note\"\n        date = \"2026-05-04\"\n        severity = 7\n        score = 70\n\n    strings:\n        $s1 = \"!!!_IMPORTANT_FILES_ARE_CHANGED.txt\" ascii nocase\n        $s2 = \"How_To_Decrypt_My_Files.txt\" ascii nocase\n        $s3 = \"RAGNAROK\" ascii nocase\n        $s4 = \".RAGNAROK\" ascii\n\n    condition:\n        any of them\n}","sha256":"b291333fc9efcbd02b557a10e05ecf6b33aaa7528bd96054c3f2c9b105b25cf3","byte_size":513,"updated_at":"2026-06-24 05:16:04"}]}