BTCWare Ransomware Mutex Detection
The rule detects the presence of specific mutex names ('PAYDAYDAYPAY') that are known to be associated with BTCWare ransomware activity. This detection is based on process creation events where these mutexes are observed.
Sigma
