ce12f52b95e049b6c1c56308acf2d0b509f9619a87606a45b02139abe203447c

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 16:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
Size

111KB
MD5

2aba2eed615d92ec14b927145de88110
SHA1

a0cc406016b13f4a48dc66af3c08009b97e1d5cd
SHA256

ce12f52b95e049b6c1c56308acf2d0b509f9619a87606a45b02139abe203447c
SHA512

a862f652ad92351795b75e41f2028d517fd14ddc24bb5496c5ff0104623196cabfc9888ec4fc3b1abab5921cd241fb790bb8f881069d853938a8596405d06938
SSDEEP

768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5KcMcoYJIJDYJIJ1wz1JNFHH1JNFHeX2yYa:W7ZQpApjIKTie+e3wBJ/HVJ/HeXX

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (738) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\es-ES\WMM2CLIP.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\OmdBase.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\msdbg2.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Araguaina.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Barbados.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\uz.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\CheckpointUndo.ps1.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\el.pak.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\History.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\fur.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado27.tlb.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msadce.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sw.pak.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msadcs.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\iedvtool.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\tr.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpnr.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2native.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\sq.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\jsdebuggeride.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\net.dll.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\cy.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ky.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ps.txt.tmp	2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2aba2eed615d92ec14b927145de88110_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini.tmp

Filesize
111KB

MD5
131416e86386741cea0a7ce39896e11c

SHA1
e0599d1b60f8f3b7fe76c50073f94a72428f92fb

SHA256
6668dd75f99ab0222c71f48973cd9ad56b9ab22a79392e10929ec7214934f431

SHA512
25185d95a76baeb71c70ab18bf8ddf36f2b8c14e481a6262fa9bf790acc9b2cfa94c8e93f98ecf8b22abd3d6071007074e5000cf9ef318f7c8c0ca0a68b79a9b

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
120KB

MD5
337ff347743ce20cfe987ce7cab39106

SHA1
3f411a33d564be53b1603e796bfb5f11ef6a0633

SHA256
1a9f9ece0f121995432811f16bdc069066be131ce9947cd34cc0a817d131cd6d

SHA512
38f75db854badc03139ca039d1fb2b83c9c66b5b1f9b929e2eefe99421e50a64d15f7bb7f676e1f5504f42eeb090622d61ec2d683f1ff742aaed0154b8ede9ea

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads