AvosLocker Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with AvosLocker ransomware activity. The detection logic looks for processes creating mutexes named 'ievah8eVki3Ho4oo' or 'Cheic0WaZie6zeiy'. The presence of these mutexes indicates a high probability of AvosLocker ransomware execution on a Windows system.
Sigma
