ByteCode MSIL Ransomware Venom Detection
This rule detects the Venom ransomware by identifying specific bytecode patterns associated with its environment setup, file discovery, and encryption routines. The rule looks for a combination of these patterns within a PE file (indicated by the MZ header).
YARA
