Walking the delivery chain from VBS to PS to DOTNET
Article Link: Triage Malware Delivery Chain | OALABS Research