6740d0ca97c88527b23da8c7f6e03066f9c529d0a2e8ff88ddbfed5f0fd34b27

Analysis

max time kernel
144s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21/01/2025, 18:57

Target

OneclickTools/NSudo/NSudoLG.exe
Size

174KB
MD5

423129ddb24fb923f35b2dd5787b13dd
SHA1

575e57080f33fa87a8d37953e973d20f5ad80cfd
SHA256

5094ad359d8cf6dc5324598605c35f68519cc5af9c7ed5427e02a6b28121e4c7
SHA512

d3f904c944281e9be9788acea9cd31f563c5a764e927bcda7bae6bedcc6ae550c0809e49fd2cf00d9e143281d08522a4f484acc8d90b37111e2c737e91ae21ce
SSDEEP

3072:XVLC09ymR7sITY17jR7h05cDnxngU9yInRU+Wi+StbaoJLQfo8BuA6N3ls:XT9yO7sITYNmYnbyInRU+Wi+StbaoJLR

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2528	NSudoLG.exe

C:\Users\Admin\AppData\Local\Temp\OneclickTools\NSudo\NSudoLG.exe
"C:\Users\Admin\AppData\Local\Temp\OneclickTools\NSudo\NSudoLG.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2528

memory/2528-0-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download