a2b6908fd3b6c108f6fe2cf2655d8a39105f05a9c38ce328728469deceb3b6cf

Analysis

max time kernel
149s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 09:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
Size

96KB
MD5

b9a996e5b342e7670afb501ed39a0640
SHA1

b72a6d4508962535178c1acd310112a3cb35ae0b
SHA256

a2b6908fd3b6c108f6fe2cf2655d8a39105f05a9c38ce328728469deceb3b6cf
SHA512

78173629bb8a7f6e4ad83931b9bdd198f04e250286e6e70bdcd6652294dc13bd64667fc972f7540a8bd618f51314084eec395b925bb83287f56d1f58fcce6863
SSDEEP

1536:W7ZhA7pApH1IwVHykEElEa0NQn0NQie+ech/hh:6e7WpnhkElEa0NQn0NQie+eW

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (483) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ms.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ar.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\dicjp.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ext.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado15.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdatl3.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\InputPersonalization.exe.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado26.tlb.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\fi.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\desktop.ini.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jabswitch.exe.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\hu.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\DiagnosticsTap.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\de-DE\OmdProject.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\he.pak.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ne.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\nl.txt.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrfralm.dat.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\jsdebuggeride.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msador15.dll.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png.tmp	b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\b9a996e5b342e7670afb501ed39a0640_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini.tmp

Filesize
96KB

MD5
89e294d9dab915300b51c5f7cabcde04

SHA1
d255002b6c464c2c49686695581266bdc45928f1

SHA256
3caf79c8e1ec70865d4f56b3a0f4d1eef05de2854413d5b831902237a7377508

SHA512
dd5fbd0e9631a43f39a261680a77d81059ed976608b75e8d607f6483cf9f639db304ed229f68edf0275afaa38e5d15d8ee861e35db4433b8253cf8b4e1b019a8

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
105KB

MD5
fe7a2d58cef2e0d2d5935fa130834b35

SHA1
1beac573f9517b8de476026e35d102ed05ec75cd

SHA256
5e27412d01403f281491ad139effbe273c394cfd57efb34bbba7e7151688624c

SHA512
a9773795a64b115315125a9f38c9be86e2020f3a4f67a307e7ba161e696d28f979ecc9db7bd85473f24707b5d9a34c201d47f295bb1e970f12ee7f7936cc5ce1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads