Money Message Ransomware Mutex Detection
The rule detects the creation of specific mutex names associated with Money Message ransomware. It looks for the mutex '12345-12345-12235-12354' during process creation events on Windows systems. The presence of this mutex indicates potential Money Message ransomware activity.
Sigma
