SilverFox RAT Mutex Detection

The rule detects the creation of processes that utilize specific mutex names associated with the SilverFox RAT. Specifically, it looks for the mutex name 'Global\IsUserAnAdmin'. This indicates potential SilverFox RAT activity on a Windows system.

Sigma