Paladion interview question

How would you create an IOC and a rule for a Ransomware ?