Cincoo Ransomware Detection

This YARA rule detects the Cincoo ransomware by identifying specific byte patterns associated with its file finding, file encryption, and ransom note dropping functionalities. The rule requires all three sets of patterns to be present in a file to trigger a detection, reducing false positives.