Ragnarlocker Ransomware IOCs

RagnarLocker is identified by the extension ā€œ.RGNR_<ID>,ā€ where <ID> is a hash of the computer’s NETBIOS name. The actors, identifying themselves as ā€œRAGNAR_LOCKER,ā€ leave aĀ .txt ransom note, with instructions on how to pay the ransom and decrypt the data....