b586527efd9711fc2c1e9f90c048c4bc03a89860ab47bfb277de0de8e092f498

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
07-05-2024 22:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
Size

71KB
MD5

4ff51f8c302bd2e9b1d9db33c4aaded0
SHA1

15a564c56c53bac83ae0ad24874550927c689eb1
SHA256

b586527efd9711fc2c1e9f90c048c4bc03a89860ab47bfb277de0de8e092f498
SHA512

ec0ea6d0bc1cb221e734828e831a5fc02e07f14b1c9ee0f176d0753000cd5c17a351f1d469936b075e6b57019d328bef7b39149c5e7f43feaf84bb41e731900d
SSDEEP

1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696v:6e7WpXYvndv

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3599) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libmod_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\settings.css.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-options.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-14.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Microsoft Games\Hearts\Hearts.exe.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\ChkrRes.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Common Files\System\msadc\de-DE\msadcfr.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\it-IT\DVDMaker.exe.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Tell_City.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Microsoft Office\Office14\VisioCustom.propdesc.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-2.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guam.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\es-ES\Minesweeper.exe.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pago_Pago.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-awt.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libau_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows NT\TableTextService\ja-JP\TableTextService.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\it-IT\gadget.xml.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yakutsk.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\bin\prism-d3d.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\La_Rioja.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Media Player\WMPDMC.exe.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\lib\zi\Africa\Tripoli.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_shared.gif.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Palau.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Internet Explorer\en-US\iedvtool.dll.mui.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Guyana.tmp	4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI.exe"
1⤵
- Drops file in Program Files directory
PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

Filesize
71KB

MD5
59606c00c1ac7901a7b6b6afe032ccb4

SHA1
cbcf1aeeda288559bea40ba339adb9aed19b87f8

SHA256
657a273a11328a7b176be76cd23c7fa2e1b2b284c1e31a944ac29f34c74d022d

SHA512
72f5a28aeb93933cd0d51eab5dd9f107eef88102862d44c3c0401a3e957dad5868469d6ca395dc1eb75d286ce3d5f66fd4db2751c1e48cc3c3db535451aa9fa1

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
80KB

MD5
b907dbdc4ac26c24e368be131066b64e

SHA1
527f1b139653d76520fbcd68f374f11392726a47

SHA256
83f66ee31da4ef5cbccaa6fec03605eeb42f9238b0fc857c2f47949f3c08b905

SHA512
121915607716c19e07370920331f6ee64dc8a9ad76561ad475800e57e5ee4fedf3362464b4138b98a9d68a9c472037e6fe7191d3e791f9f469bb8a490f10a90c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads