Moisha Ransomware Mutex Detection
The rule detects the creation of specific mutex names associated with Moisha ransomware activity. It looks for the mutex 'Global\__w3616de3-6u4b-32fc-97b1-de928faadf50'. This detection is based on the presence of these unique mutex strings, which are indicators of the ransomware's execution.
Sigma
