Lumma Stealer Mutex Detection

The rule detects the creation of specific mutexes known to be associated with the Lumma stealer malware. It looks for a mutex named 'sodfksdkfalksdasgpkprgasdgrrkgwhrterheegwsdfwef'. The detection is based on process creation events in Windows environments.

Sigma