Matanbuchus Loader Mutex Detection
This rule detects the creation of specific mutex names associated with the Matanbuchus loader. The rule looks for mutexes matching the pattern 'sync<UniqueID>', where <UniqueID> is a variable string. This activity is indicative of Matanbuchus loader execution.
Sigma
