DUSTTRAP Dropper Mutex Detection

Achmad Adhikara@adhikara13

•updated Feb 27, 2026•1•0•12

Detects known mutexes associated with DUSTTRAP dropper activity. The rule specifically looks for the mutex name 'ICMzUEkdLNayBdWF' during process creation events on Windows systems.