MasonRAT Mutex Detection
The rule detects the creation of specific mutex names ('rmldKj40qW2UTlEe') which are known to be associated with MasonRAT activity. This indicates the presence and execution of the MasonRAT malware on a system.
Sigma

The rule detects the creation of specific mutex names ('rmldKj40qW2UTlEe') which are known to be associated with MasonRAT activity. This indicates the presence and execution of the MasonRAT malware on a system.

Already have an account?