Gunra Ransomware Staticindicators
Detects Gunra ransomware components (main.exe, cryptor.exe, msmp.exe) via known file hashes, or via a clustered combination of embedded exclusion-logic strings referencing C:\Windows and .exe/.dll/.sys extensions used by the ChaCha20+RSA-4096 encryptor to skip system files; requires all exclusion strings present, in the expected order, and tightly clustered together to avoid matching unrelated installers that merely reference these common substrings individually
YARA
