Mallox Ransomware Mutex Detection

This rule detects the creation of specific mutexes (89A72EF01) that are known to be associated with Mallox ransomware activity. The presence of these mutexes indicates a high probability of Mallox ransomware execution on a Windows system.

Sigma