Xtreme RAT Mutex Detection

This rule detects the creation of specific mutexes known to be associated with the Xtreme RAT (Remote Access Trojan) malware. The detection is triggered when a process creates a mutex named 'XTREMEUPDATE'. The presence of these mutexes indicates potential Xtreme RAT activity on a Windows system.

Sigma