DarkTortilla Loader Mutex Detection
This rule detects the creation of specific mutexes known to be associated with the DarkTortilla loader. The rule specifically looks for the mutex name 'NUkiklN<yjUKNj' during process creation events on Windows systems. The presence of this mutex name indicates potential DarkTortilla malware activity.
Sigma
