Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 16:03
Static task
static1
Behavioral task
behavioral1
Sample
2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
-
Size
111KB
-
MD5
2aba2eed615d92ec14b927145de88110
-
SHA1
a0cc406016b13f4a48dc66af3c08009b97e1d5cd
-
SHA256
ce12f52b95e049b6c1c56308acf2d0b509f9619a87606a45b02139abe203447c
-
SHA512
a862f652ad92351795b75e41f2028d517fd14ddc24bb5496c5ff0104623196cabfc9888ec4fc3b1abab5921cd241fb790bb8f881069d853938a8596405d06938
-
SSDEEP
768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5KcMcoYJIJDYJIJ1wz1JNFHH1JNFHeX2yYa:W7ZQpApjIKTie+e3wBJ/HVJ/HeXX
Malware Config
Signatures
-
Renames multiple (738) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\es-ES\WMM2CLIP.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\OmdBase.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\msdbg2.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Araguaina.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Barbados.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\uz.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\CheckpointUndo.ps1.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\el.pak.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\History.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\fur.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\msado27.tlb.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\msadc\msadce.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sw.pak.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\msadc\msadcs.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\iedvtool.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\tr.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpnr.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2native.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\sq.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\jsdebuggeride.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\net.dll.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\cy.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\ky.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\ps.txt.tmp 2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
111KB
MD5131416e86386741cea0a7ce39896e11c
SHA1e0599d1b60f8f3b7fe76c50073f94a72428f92fb
SHA2566668dd75f99ab0222c71f48973cd9ad56b9ab22a79392e10929ec7214934f431
SHA51225185d95a76baeb71c70ab18bf8ddf36f2b8c14e481a6262fa9bf790acc9b2cfa94c8e93f98ecf8b22abd3d6071007074e5000cf9ef318f7c8c0ca0a68b79a9b
-
Filesize
120KB
MD5337ff347743ce20cfe987ce7cab39106
SHA13f411a33d564be53b1603e796bfb5f11ef6a0633
SHA2561a9f9ece0f121995432811f16bdc069066be131ce9947cd34cc0a817d131cd6d
SHA51238f75db854badc03139ca039d1fb2b83c9c66b5b1f9b929e2eefe99421e50a64d15f7bb7f676e1f5504f42eeb090622d61ec2d683f1ff742aaed0154b8ede9ea