MovieReaper Loader Anti-Sandbox Checks Before C2 Beacon
Detects executable files launched from torrent-related directories or parent processes that perform reconnaissance commands or registry queries indicative of sandbox or virtualization detection, a technique observed in the MovieReaper malware loader.
Splunk (SPL)

