ArrowRAT Mutex Detection

The rule detects the creation of specific mutexes known to be associated with ArrowRAT malware. It specifically looks for the mutex name 'ArrowRAT_Mutex_ArrowRAT'. This activity indicates the presence and execution of ArrowRAT on a Windows system.

Sigma