Skip to content

Hide Navigation Hide TOC

WScript or CScript Dropper - File (002bdb95-0cf1-46a6-9e08-d38c128a6127)

Detects a file ending in jse, vbe, js, vba, vbs, wsf, wsh written by cscript.exe or wscript.exe

Cluster A Galaxy A Cluster B Galaxy B Level
WScript or CScript Dropper - File (002bdb95-0cf1-46a6-9e08-d38c128a6127) Sigma-Rules Visual Basic - T1059.005 (dfd7cc1d-e1d8-4394-a198-97c4cab8aa67) Attack Pattern 1
WScript or CScript Dropper - File (002bdb95-0cf1-46a6-9e08-d38c128a6127) Sigma-Rules JavaScript - T1059.007 (0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d) Attack Pattern 1
Visual Basic - T1059.005 (dfd7cc1d-e1d8-4394-a198-97c4cab8aa67) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2
JavaScript - T1059.007 (0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2