Threat Actor Profile
Description
Dragon Ransomware, is promising rapid and customizable ransomware operations for Windows systems. Key features include a compact 50KB file size, ultra-fast encryption speed, and a builder tool that allows users to personalize ransomware configurations. The tool will be available to the public once the team reaches 1,000 subscribers on their channel, signaling a potential rise in availability to threat actors.
Confidence Score
Tags
First Seen
Unknown
Last Updated
Unknown
Active Status
ActiveCreated
April 29, 2026
Indicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'added_date': None,
'client': '2003264@sit.singaporetech.edu.sg',
'description': 'Dragon Ransomware, is promising rapid and customizable '
'ransomware operations for Windows systems. Key features '
'include a compact 50KB file size, ultra-fast encryption '
'speed, and a builder tool that allows users to personalize '
'ransomware configurations. The tool will be available to the '
'public once the team reaches 1,000 subscribers on their '
'channel, signaling a potential rise in availability to threat '
'actors.',
'firstseen': '2024-10-22T20:38:34+00:00',
'group': 'dragonransomware',
'has_negotiations': False,
'has_ransomnote': False,
'lastseen': '2024-12-16T22:51:57+00:00',
'locations': [{'available': False,
'fqdn': 't.me',
'slug': 'https://t.me/DragonRansom',
'title': 'Telegram: Contact @DragonRansom',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'tiaras_metadata': {'has_negotiations': False,
'has_ransomnote': False,
'locations': [{'available': False,
'fqdn': 't.me',
'slug': 'https://t.me/DragonRansom',
'title': 'Telegram: Contact @DragonRansom',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'ransomware_live_group': 'dragonransomware',
'tools': {},
'url': 'https://www.ransomware.live/group/dragonransomware',
'victims': 39,
'vulnerabilities': []},
'tiaras_source': 'ransomware.live',
'tools': {},
'ttps': [],
'url': 'https://www.ransomware.live/group/dragonransomware',
'victims': 39,
'vulnerabilities': []}