DcRAT Global\ShitSetupOn26126k Mutex Creation Detected

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•1

Detects process start events where the command line contains the specific string 'ShitSetupOn26126k'. This appears to be a specific indicator of compromise (IOC) related to a custom script or malware installation routine.