MountLocker Ransomware Detection

This rule detects the MountLocker ransomware based on specific byte patterns found within its executable code. The patterns are associated with functions responsible for encrypting files and finding files to encrypt, which are core functionalities of ransomware.