The Gentlemen - Ransomware Execution
Detects The Gentlemen ransomware execution. The ransomware requires a --password flag (8-byte key) and optionally --path for targeted encryption. Creates README-GENTLEMEN.txt ransom notes, appends .7mtzhh extension, and drops self-deleting batch files for cleanup.
YARA-L
