a4bcd5b9c8d557fee4d8b2931c407370a118718ef21790a502446e8b919e978f

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 17:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
Size

75KB
MD5

2d569ccc5b05450515611c05929f7a90
SHA1

4eeced927d9efdbeb4ee8230e01ede05add81ac8
SHA256

a4bcd5b9c8d557fee4d8b2931c407370a118718ef21790a502446e8b919e978f
SHA512

c390052764a011f819b574d00bbf31f217da92a157bce0cefca3db67668799a13930b519b8bf6feda0cd7abe48f1b16a609a07d8aa5a6fcf403b843e669ea500
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/Y:6e7WpMaxeb0CYJ97lEYNR73e+eKZY

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3450) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Edmonton.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\content-types.properties.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Toronto.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jhat.exe.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClientsideProviders.resources.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\it-IT\msaddsr.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Mahjong\es-ES\Mahjong.exe.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\shvlzm.exe.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Windows Defender\de-DE\MpEvMsg.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mshwLatin.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\it-IT\ChkrRes.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\appletrailers.luac.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jp2ssv.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\private_browsing.exe.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\deploy.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationClientsideProviders.resources.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\zh-cn.txt.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tashkent.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\AST4.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Godthab.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Auckland.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\security\java.policy.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Amman.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\sqmapi.dll.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Sakhalin.tmp	2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2d569ccc5b05450515611c05929f7a90_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\desktop.ini.tmp

Filesize
76KB

MD5
cd756aea6fb78ea8fb5f7fd658fed043

SHA1
3b4def192b534d58ac1e5b1ddd446332bd4cb352

SHA256
7c240edbe3db61857b3086d8245fe8f6994c42917c106484dfd275e16cfd2334

SHA512
1930cc8f26e9d5489fc318ab4c84156d94cdbc69d812fe5c6d9cd0b09c89602c34e7205559a18910f20fbad5c786634def2539a4a9ebfef4553d91e187a651d1

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
85KB

MD5
6c970393486fb3d324cce4fb8586e00d

SHA1
7077e0dec6a2686c1beba79d4ad2b4330b8caafa

SHA256
541e42954d719053b3654993a93a2c7cc229e1fbb7bb23d2777389431411b1f8

SHA512
e40a0c565b67195a1dcd3225dbc0326e61e1bf63438f0a3f7fd71b685b79b86b469ea9bef834c6a2c0ebf78246ce6d492be3e65b70ec9f5a3bd8b363b4a7aea5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads