Babuk Ransomware Mutex Detection
This rule detects the creation of a specific mutex named 'DoYouWantToHaveSexWithCuongDong'. This mutex name is known to be associated with Babuk ransomware activity. The detection is based on monitoring process creation events on Windows systems for the presence of this particular mutex.
Sigma
