Plenty of existing ransomwares delete user files on everything-but-RU machines. Perhaps the maintainer of this package subscribes to the old view that
"turnabout is fair play".
"Some people in my country were victimized by organized crime in another country, and that country's government didn't try to stop the criminal activity, so it's turnabout, and hence fair play, for me to victimize other people in that country"?
Wasn't that about Cyrillic keyboard layout? Russia don't own neither Cyrillics, nor Russian language.
Are you a child?