Pay2Key Ransomware Mutex Detection
This rule detects the creation of specific mutex names ('BooYYoYnYoooY') that are known to be associated with Pay2Key ransomware activity. The detection is based on monitoring process creation events in Windows environments.
Sigma
