Allcome Clipper Mutex Detection
The rule detects the creation of processes that utilize specific mutex names associated with the Allcome clipper malware. Specifically, it looks for the mutex name '08841d-18c7-4e2d-f7e29d'. This indicates potential Allcome clipper activity on a Windows system.
Sigma
