Domanda di colloquio di Paladion

How would you create an IOC and a rule for a Ransomware ?