Pay2Key sandbox evasion via timeout.exe /t 10 and ping 127.2 delay
Detects execution of timeout.exe or ping.exe with specific command-line arguments often used by Pay2Key ransomware to implement time-delay mechanisms for sandbox and analysis evasion.
Splunk (SPL)
