MagnetLoader Mutex Detection

The rule detects the creation of processes that utilize specific mutex names associated with MagnetLoader malware. It specifically looks for the mutex name 'SM0:220:304:WilStaging_02_p1h'. Detection of this mutex name indicates potential MagnetLoader activity on the system.

Sigma