MovieReaper Loader Execution Using PEB Ldr API Resolution
Detects execution of the MovieReaper initial loader binary. This malware employs advanced anti-analysis techniques, specifically manual PEB-walking to resolve APIs and evade detection by standard library loading hooks. The rule alerts on known file hashes and specific masquerading filenames.
Microsoft Sentinel (KQL)
