Mamona Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with Mamona ransomware. It looks for the mutex name 'Global\Fxo16jmdgujs437' during process creation events on Windows systems. The presence of this mutex indicates potential Mamona ransomware activity.
Sigma
