Anatova Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with the Anatova ransomware. It looks for a process creating a mutex with the exact name '6a8c9937zFIwHPZ309UZMZYVnwScPB2pR2MEx5SY7B1xgbruoO'. This activity is indicative of Anatova ransomware execution or presence on a Windows system.
Sigma
