Rimawi RAT Mutex Detection
The rule detects the creation of specific mutexes associated with the Rimawi RAT. It specifically looks for mutexes named 'AZSXDCFVGBHNqwertyui'. The detection is based on process creation events on Windows systems.
Sigma
The rule detects the creation of specific mutexes associated with the Rimawi RAT. It specifically looks for mutexes named 'AZSXDCFVGBHNqwertyui'. The detection is based on process creation events on Windows systems.
Already have an account?