5ss5c Ransomware Mutex Detection
The rule detects the creation of specific mutexes associated with the 5ss5c ransomware. It looks for the mutex name '5ss5c_CRYPT' during process creation events on Windows systems. The presence of this mutex indicates potential 5ss5c ransomware activity.
Sigma
