RAWorld Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with RAWorld ransomware activity. The rule specifically looks for the mutex name 'For whom the bell tolls, it tolls for thee'. Detection of this mutex indicates a high probability of RAWorld ransomware execution on the system.
Sigma
