Gunra Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with the Gunra ransomware. It looks for the mutex name 'kjsidugiaadf99439' during process creation events on Windows systems. The presence of this mutex indicates potential Gunra ransomware activity, which typically involves encrypting files and demanding a ransom, falling under the impact category of data encryption.
Sigma
