CHARON Ransomware Mutex Detection

Achmad Adhikara@adhikara13

•updated Feb 27, 2026•0•11

Detects the creation of specific mutexes known to be associated with the CHARON ransomware. The rule looks for the mutex name 'OopsCharonHere'.