BananaCrypt Ransomware Detection
This rule detects the BananaCrypt ransomware based on specific byte patterns found in its 'encrypt_files' and 'find_files' functions. The rule looks for a combination of these patterns within a PE (Portable Executable) file, indicated by the 'MZ' header.
YARA
