Ferrlock Ransomware Detection

This Yara rule detects the Ferrlock ransomware based on specific byte sequences found within its executable code. The rule looks for patterns related to file searching, resource enumeration, test file creation, and file encryption, indicating the presence of the Ferrlock ransomware.