33c4ed9ec950a719d1add7dc6d7cdf12d191bd2e08fdb7c595642fa2e70d0206

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 06:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
Size

69KB
MD5

7669a3a87f4193b0a11af6383dc871d0
SHA1

bd6f1489def9b51af6c1ac4f830221ef3ca4b8cd
SHA256

33c4ed9ec950a719d1add7dc6d7cdf12d191bd2e08fdb7c595642fa2e70d0206
SHA512

9643188c09d9fb18151db4748e5e6be1c4f154c5c5cce3362d0df0d7c633e38f52ea353a61a1e1e731a8011851d785174f60e235990109fa7c5f1cc080fa3d50
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhd:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsQ

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3495) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\fxplugins.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.IO.Log.Resources.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libt140_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\PST8PDT.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\libxml2.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\bckgzm.exe.mui.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\modules\dkjson.luac.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ja.txt.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\js\calendar.js.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Windows.Presentation.resources.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Vladivostok.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Curacao.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msaddsr.dll.mui.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_socket.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Web.Entity.Design.Resources.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdaps.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunmscapi.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Managua.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Brussels.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\MST7MDT.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\js\settings.js.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\server\jvm.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-11.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\hprof.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Tehran.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\de-DE\Hearts.exe.mui.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Noumea.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Rankin_Inlet.tmp	7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\7669a3a87f4193b0a11af6383dc871d0_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

Filesize
69KB

MD5
ca5277dd87d0da698c4b4d0d4ca61daf

SHA1
697d37abdbb98a7958621ec45120f288895fdc60

SHA256
41f65b207f2e39e9463221e1b63fcca1ee42ea09578b8f6c60df18c9680216c9

SHA512
2f09f7e2bd3c91f6a96877d1690bfa339ec1cd95a2d2e128f1f6547b064f733bae9047a8173e437da094d17fdb86b3c075a1d0a510f9cd9b8a79d5ff60325130

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
78KB

MD5
e05449c6d8d1bf08b5ac83903b7f65b2

SHA1
96c173dfc2a253012668a182ca4844dd53cbf156

SHA256
6bd0bffc86ae2cb8e8c54b091cbe6bbace17ba88d459c5b0b7447bb2a1cab971

SHA512
9fc4aa1f5311ddec53d5349d308a81f9d26465cf316424f64604502b54ff83908b77c87e74b4bfb88cae5db524d08f3c7cbc45e2c9b1b864c4ca285d6a5c8685

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads