346164fdc5c43a8049fd0bdc082f31f1af81d840330d87c7a6b76c37c31a19df

Analysis

max time kernel
149s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 19:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1219fefe55150361872540a4f600d830_NEIKI.exe
Size

78KB
MD5

1219fefe55150361872540a4f600d830
SHA1

3b0faa98c00f580fdfe55df7fa3cfb9efdae2a80
SHA256

346164fdc5c43a8049fd0bdc082f31f1af81d840330d87c7a6b76c37c31a19df
SHA512

ddfcc191c15d31803ec6fd98f28870de61f4edd5edbbc731ea065bca2dacaf6c350e507bbbb6da1733d1b22c4723ed7072687171b79a59a8a2e87bc78188dc44
SSDEEP

1536:W7ZDpApYbWjIlE77ufL6YRYvQFrxFrN6v:6DWpwE7oL6uFrDrA

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (514) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\wab32.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Internet Explorer\perfcore.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\kcms.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\ast.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\vi.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\java.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\ado\msado27.tlb.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\ja-JP\OmdProject.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\et.pak.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\ado\msado26.tlb.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\ado\msader15.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\mng.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\pa-in.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\extcheck.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\klist.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll.sig.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jdwp.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogo.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\am.pak.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\is.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ro.pak.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\msdasqlr.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\Ole DB\de-DE\msdasqlr.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipBand.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdasql.dll.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\7-Zip\Lang\th.txt.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Internet Explorer\ielowutil.exe.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\en-US.pak.tmp	1219fefe55150361872540a4f600d830_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\1219fefe55150361872540a4f600d830_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\1219fefe55150361872540a4f600d830_NEIKI.exe"
1⤵
- Drops file in Program Files directory
PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini.tmp

Filesize
78KB

MD5
7eb1a264a3c92ad28d0935ebd89af9e6

SHA1
31375407b4b5e8f5560df2c1e221d2573e4b2639

SHA256
2329e5a4633574c9af98c5a85b1fc5438908ab96e7967c0aefa64797f7c05a0e

SHA512
6970ae69073eca5af185b1d7872a61f86c14f10a6fd2f7028cd02ca135b875d9cc21c8ed7182caae64a09622b37023c390cd64f9c2c87bcd81a867848ac91e05

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
87KB

MD5
90c4ad5e6470d1e29c7815100807e916

SHA1
a204a76d0ce7a1a686410369b9311151d19eabaf

SHA256
f03c3340efaacd28f4502fb774a5931e4313dce944462ab553657e94ee314a24

SHA512
4a25928069586e850b50904a85e91491c48e7431c0d714644544e56485db2541a5afb0f437f7918b0cf67b111909d5613735d097b6df6bce6baa2be5bac67b30

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads