Kimsuky JSE Loader Self-Deletion via Scripting.FileSystemObject After Execution

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•6

Detects wscript or cscript executing shell commands (del/delete) to remove .jse files. This pattern is commonly associated with malicious scripts attempting to clean up traces of their execution after running from temporary locations.