DragonReturn Dropper Single-Instance Mutex Global\ShitSetupOn26126k
Detects the presence of a specific global event object 'Global\ShitSetupOn26126k' used as a mutex or single-instance check by the DragonReturn malware dropper.
Splunk (SPL)

Detects the presence of a specific global event object 'Global\ShitSetupOn26126k' used as a mutex or single-instance check by the DragonReturn malware dropper.

Already have an account?