.. /.Wsh

Executable
Script
Double Click

Contributors:

mr.d0x

Description:

WSH is a Windows Script file that contains scripting languages such as JScript.

OS:

Windows

Recommendation:

Block the download and execution of all WSH files. Alternatively, change the default application for WSH files to a text editor such as Notepad.

Resources:

https://www.bleepingcomputer.com/news/security/new-wsh-rat-malware-targets-bank-customers-with-keyloggers/

File Samples: