Delphimorix Ransomware Detection

This YARA rule detects the Delphimorix ransomware by identifying specific byte sequences (patterns) associated with its file encryption and file finding routines. The rule looks for a combination of these patterns within a file, along with the MZ header (0x5A4D) indicating a Windows executable.