Dustman Wiper Mutex Detection

This rule detects the creation of specific mutexes associated with the Dustman wiper malware. The mutex name 'Down With Bin Salman' is a strong indicator of this particular wiper's activity. Detection of this mutex suggests that the Dustman wiper may be active on the system, potentially leading to data destruction.

Sigma