Netdooka RAT Mutex Detection
The rule detects the creation of specific mutex names associated with Netdooka RAT activity. The mutex name '3f0d73e2-4b8e-4539-90fd-812330bb39c8' is used as an indicator for this malware. This detection focuses on process creation events on Windows systems.
Sigma
