Embargo Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with Embargo ransomware activity. It specifically looks for mutexes named 'LoadUpOnGunsBringYourFriends' or 'IntoTheFloodAgainSameOldTrip' during process creation events on Windows systems.
Sigma
