GuptiMiner Mutex Detection
This rule detects the creation of specific mutex names that are known to be associated with GuptiMiner activity. The mutex names include patterns like 'Mutex_ONLY_ME_V<version>', 'SLDV<2-3 numeric>', 'GlobalMIVOD_V4', 'MIVOD_6', and 'MTX_EX01'. Detection of these mutexes indicates the presence or execution of the GuptiMiner malware on a Windows system, which is known for cryptocurrency mining and backdoor capabilities.
Sigma
