has used the API calls NtQuerySystemTime GetSystemTimeAsFileTime and GetTickCount to gather time metrics as part of its checks to see if the malware is running in a sandbox.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has used the API calls NtQuerySystemTime GetSystemTimeAsFileTime and GetTickCount to gather time metrics as part of its checks to see if the malware is running in a sandbox. ### Response: T1124.