Smokeloader 2025 Mutex Creation
Detects the creation of a mutex with a pattern matching new SmokeLoader versions (2025 alpha and 2025). The malware's main module is injected into explorer.exe, which then creates this distinct mutex to prevent multiple instances from running.
YARA-L
