Conti Ransomware Mutex Detection

This rule detects the creation of specific mutexes known to be associated with Conti ransomware activity. The rule looks for the exact mutex names 'kjsidugidf99439' or 'hsfjuukjzloqu28oajh727190'. Detection of these mutexes indicates a high probability of Conti ransomware execution on a Windows system.

Sigma