Cryakl Ransomware Detection

This YARA rule detects the Cryakl ransomware by identifying specific byte sequences associated with its file enumeration and encryption routines. The rule looks for two distinct patterns, `$enum_and_encrypt_files_1` and `$enum_and_encrypt_files_2`, within a file that also starts with the MZ header (0x5A4D). These patterns are indicative of the ransomware's core functionality related to finding and encrypting files on a system.