Quasar RAT Mutex Detection

Achmad Adhikara@adhikara13

•updated Feb 27, 2026•0•16

The rule detects the creation of specific mutexes known to be associated with Quasar RAT activity. It looks for mutex names matching 'QSR_MUTEX_<uniqueid>'.