Overview
overview
8Static
static
5OneclickTo...MD.bat
windows11-21h2-x64
1OneclickTo...at.exe
windows11-21h2-x64
8OneclickTo...ol.exe
windows11-21h2-x64
5OneclickTo...LG.exe
windows11-21h2-x64
1OneclickTo...10.exe
windows11-21h2-x64
1OneclickTo...ca.bat
windows11-21h2-x64
1OneclickTo...nd.bat
windows11-21h2-x64
4OneclickTo...on.exe
windows11-21h2-x64
1Analysis
-
max time kernel
9s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
10/01/2025, 21:45
Behavioral task
behavioral1
Sample
OneclickTools/Amd/AMD.bat
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
OneclickTools/DPC Checker/dpclat.exe
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
OneclickTools/Dcontrol/dControl.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
OneclickTools/NSudo/NSudoLG.exe
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
OneclickTools/OOshutup10/OOSU10.exe
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
OneclickTools/Orca/Orca.bat
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
OneclickTools/Sound/Sound.bat
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
OneclickTools/Timer Resolution/SetTimerResolution.exe
Resource
win11-20241007-en
General
-
Target
OneclickTools/OOshutup10/OOSU10.exe
-
Size
1.9MB
-
MD5
4803e06db91fdb8b6d1b65c0010d2f87
-
SHA1
f6d68a7dcc9c46e663f586341e8ba8d1be6b0f9c
-
SHA256
beb7becc38ccc7ed37c47fe607b25a966a5f71aabd36ab945c3cba15451dfa7b
-
SHA512
f34195e4dd2b9a0dc4847e94547b3b4f0ee13009878f0e88954e6a070234b902814a7bdc018782cbaddb52e31e19f30bc2273d1b2ed1071f0695563e070c58c6
-
SSDEEP
49152:zE6D5EyNuGVUJEJTJxJROfOrV3rukAanKZCWumEjlGLsmt8MR+zh:TykAWKZCfmMMR+l
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3604 OOSU10.exe