Koxic Ransomware Mutex Detection

This rule detects the creation of specific mutexes known to be associated with Koxic ransomware. The detection is based on the presence of the mutex name '_atus_'. The primary goal is to identify Koxic ransomware activity on Windows systems.

Sigma