FarAttack Ransomware Detection

This Yara rule detects the FarAttack ransomware. It identifies specific byte patterns related to file searching, key creation, and file encryption routines commonly found in this ransomware variant. The rule looks for a combination of these patterns within a PE file to confirm the presence of FarAttack.