CyberVolk Ransomware Detection

This Yara rule detects the CyberVolk ransomware by identifying specific byte patterns within its 'manage_gui', 'find_files', and 'encrypt_files' functions. The rule looks for two distinct versions of the 'find_files' and 'encrypt_files' functions, indicating variations in the ransomware's implementation. The presence of these patterns suggests the file is a CyberVolk ransomware executable.