254d6e73a18ce98fa9175b68456bd70a0251e2834cbd79f6922a643f836debe9

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 17:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
Size

1.7MB
MD5

c011b9397b7e451ae76a72663a0a1a30
SHA1

5e463456d5def7742b758bdc4906c0d3adf702b8
SHA256

254d6e73a18ce98fa9175b68456bd70a0251e2834cbd79f6922a643f836debe9
SHA512

44b2cea837eed27847f4300fd4956c00242a89208195cf9712ac3d8827c8c97684176f5604a94f824fe3b6779456dbdfa381d88db8221d009c9728054d9c9d54
SSDEEP

24576:RkJAZHi+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:RkJAZHTclmJSVARa86xzW3xRoyqqxrT

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Internet Explorer\en-US\iedvtool.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\bin\klist.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\7-Zip\7-zip.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\pt.txt	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\PipeTran.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\chrome_proxy.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\msinfo32.exe.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Internet Explorer\ieproxy.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\java.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\System\msadc\msdaprst.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\IPSEventLogMsg.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\SIGNUP\install.ins	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tabskb.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Internet Explorer\ieinstal.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\fa.txt	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\ja.txt	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\iexplore.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoCanary.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\jaas_nt.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\mshwLatin.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Internet Explorer\jsprofilerui.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\System\msadc\msdaprsr.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\am.pak	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Internet Explorer\ielowutil.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\JdbcOdbc.dll	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Eurosti.TTF	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png	c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c011b9397b7e451ae76a72663a0a1a30_NeikiAnalytics.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

Filesize
7.2MB

MD5
80a09d6fa44ece1106425b2b68bb3a88

SHA1
b69af6fdcba5d3c355326b9492176a7bd9534df7

SHA256
22c04946ac0c39f164df8ac87d6b4b48c3590da4428c29ca19502703c3ca5fa9

SHA512
e53f387d691fab45230ca525dd8d07d228b9eab7b15bc9a21599529e30b03f2db20fbab25d645a964fe25b7142c17efae5b3a148d8b673f5bfb3f600a8a33e9f

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
5B

MD5
b5b682b742431a52ea8b17c72ad9c572

SHA1
326320f469235708c59f678c9a7357dca552d306

SHA256
30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

SHA512
4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

Download Submit
C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer

Filesize
5KB

MD5
6b99099c6a9b959f824e420676fe3dc8

SHA1
ba9e3b5f2f7f710d263272019be5bf5db33bf614

SHA256
34d5d8dc208ef8c73bb46fb3002fa22b8954d52a4e53be3c56b9801aeab56918

SHA512
dfe061ddec4106e68c8ea789009b0e6bf7d27072bebd0bdb724e4ccadd215b9122b04198bbc362753e2b35af16d993ddf89b44b29bb79c0e7a16eeb97f3b3d26

Download Submit
memory/2320-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2320-548-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads