VBScript dropper sandbox evasion via extended WScript.Sleep delays

Subhankar H@Andrewsec57

•updated Sep 23, 2026•0•0•3

Detects VBScript droppers that utilize excessive 'WScript.Sleep' delays to bypass sandbox analysis, often combined with error suppression and downloader APIs to execute malicious payloads.