Description
NSudo is a legitimate open source utility that runs programs with system level privileges on Windows. Cyberattackers abuse it to execute payloads with elevated permissions and bypass access controls, so defenders should triage its detections against authorized administrative use.
Stats
- First seen
- January 2023
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| DeepScan:Generic.Application.NSudo.A.49D80A37 |
| Dropped:Generic.Application.NSudo.A.604BACCD |
| Generic.Application.NSudo.A.0300855E |
| Generic.Application.NSudo.A.0913B958 |
| Generic.Application.NSudo.A.427552B8 |
| Generic.Application.NSudo.A.4E66D5B7 |
| Generic.Application.NSudo.A.6329A470 |
| Generic.Application.NSudo.A.781016A2 |
| Generic.Application.NSudo.A.8110495A |
| Generic.Application.NSudo.A.8A102BCA |
