Fangao Loader Mutex Detection

The rule detects the creation of specific mutex names associated with the Fangao loader. It specifically looks for a mutex named 'UniqueMutexName' during process creation events on Windows systems. This activity is indicative of the Fangao loader executing on a system.

Sigma