Xtreme RAT Mutex Detection
This rule detects the creation of specific mutexes known to be associated with the Xtreme RAT (Remote Access Trojan) malware. The detection is triggered when a process creates a mutex named 'XTREMEUPDATE'. The presence of these mutexes indicates potential Xtreme RAT activity on a Windows system.
Sigma

