Lolkek Ransomware Detection
This YARA rule detects the Lolkek ransomware by identifying specific byte sequences associated with its file encryption routines, volume discovery, and file discovery mechanisms. The rule looks for patterns related to encrypting files, finding logical volumes, and enumerating files, which are characteristic behaviors of ransomware.
YARA
