A Deep Dive Into a New ValleyRAT Campaign Targeting Chinese Speakers

The malware masquerades as legitimate applications like Microsoft Office and creates an empty file to lure users. It also checks for virtual machines and uses sleep obfuscation to evade memory scanners.