I would think that ransom demands would be made within 24 hours or no more than 48.
It takes a long time and a big delivery system to get $3 billion together and to the site.