Scarabey Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with Scarabey ransomware. The detection is triggered when a process creates a mutex with the name 'STOPSCARABSTOPSCARABSTOPSCARABSTOPSCARABSTOPSCARAB'.
Sigma
