Threat Actor Profile
Medium
Cybercriminal
Confidence Score
Tags
ransomware
ransomware.live
First Seen
Unknown
Last Updated
Unknown
Active Status
ActiveCreated
April 29, 2026
Indicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'added_date': '2025-03-26',
'client': '2003264@sit.singaporetech.edu.sg',
'description': None,
'firstseen': '2025-03-22T00:00:00+00:00',
'group': 'ralord',
'has_negotiations': False,
'has_ransomnote': True,
'lastseen': '2025-04-27T00:00:00+00:00',
'locations': [{'available': True,
'fqdn': 'ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion',
'slug': 'http://ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': True,
'fqdn': 'ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion',
'slug': 'http://ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': False,
'fqdn': 'ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion',
'slug': 'http://ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': False,
'fqdn': 'novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion',
'slug': 'http://novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion',
'title': 'Nova Panel | Login',
'type': 'Admin'}],
'negotiation_count': 0,
'ransomnotes_count': 1,
'tiaras_metadata': {'has_negotiations': False,
'has_ransomnote': True,
'locations': [{'available': True,
'fqdn': 'ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion',
'slug': 'http://ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': True,
'fqdn': 'ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion',
'slug': 'http://ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': False,
'fqdn': 'ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion',
'slug': 'http://ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion',
'title': 'New upgrade for Brand',
'type': 'DLS'},
{'available': False,
'fqdn': 'novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion',
'slug': 'http://novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion',
'title': 'Nova Panel | Login',
'type': 'Admin'}],
'negotiation_count': 0,
'ransomnotes_count': 1,
'ransomware_live_group': 'ralord',
'tools': {},
'url': 'https://www.ransomware.live/group/ralord',
'victims': 19,
'vulnerabilities': []},
'tiaras_source': 'ransomware.live',
'tools': {},
'ttps': [],
'url': 'https://www.ransomware.live/group/ralord',
'victims': 19,
'vulnerabilities': []}