GarrantyDecrypt Ransomware Mutex Detection
This rule detects the creation of specific mutexes associated with the GarrantyDecrypt ransomware. The detection is based on the presence of the mutex name '666_nop_nop_nop_nop'. This activity is indicative of the GarrantyDecrypt ransomware executing on a system.
Sigma
