Latrodectus Loader Mutex Detection
The rule detects the creation of a process that utilizes specific mutex names associated with the Latrodectus loader. Specifically, it looks for the mutex name 'runnung'. This activity is indicative of Latrodectus malware execution.
Sigma
