CoinHelper Miner Mutex Detection
The rule detects the creation of processes that utilize specific mutex names associated with CoinHelper miner activity. Specifically, it looks for the mutex name 'QPRZ<digit>bWvXh'. The detection is based on the 'process_creation' log category on Windows systems.
Sigma
