Strrat Javascript Downloader Execution

nomit vyas@xoxo

•updated Jan 29, 2026•0•22

Detects a Windows script host (wscript.exe or cscript.exe) spawning a Java process to execute a JAR file, a behavior observed in STRRAT malware delivery chains.