8c364c2bbedbcf20b3f16e7e241bf951ef594529b80f57d51ad73700880079ea

Analysis

max time kernel
150s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 23:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
Size

117KB
MD5

3e57b3a972705de0c9441260abdcbbe0
SHA1

55606894f151b24a1e546eb00772b0cd8fd8aece
SHA256

8c364c2bbedbcf20b3f16e7e241bf951ef594529b80f57d51ad73700880079ea
SHA512

1134a66ebd2b9c1d9f393181333a5a8fd29efd6fbc2526fd512d513d108e2f071802abf3a2e8cd0008c2047949e71ca1f4ee8449a4b547e463536c10e350a09d
SSDEEP

768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c58:/7ZQpApUsKiX26S

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3443) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\History.txt.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mip.exe.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\it-IT\wmpnetwk.exe.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\jsdebuggeride.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsdt.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\javaws.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\management\snmp.acl.template.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\Microsoft.Build.Utilities.v3.5.resources.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Gaza.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cancun.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\SIGNUP\install.ins.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\images\bing.ico.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Budapest.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.IdentityModel.Selectors.Resources.dll.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ru.txt.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\server\classes.jsa.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Pohnpei.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\Video-48.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\intf\modules\host.luac.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\br.txt.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Indian\Chagos.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\ONLNTCOMLIB.DLL.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Budapest.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\OutTrace.vst.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Defender\it-IT\MpEvMsg.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\de-DE\WMPDMCCore.dll.mui.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ko.properties.tmp	3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3e57b3a972705de0c9441260abdcbbe0_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp

Filesize
117KB

MD5
ca59027b5257c29437bce1ee5377babc

SHA1
9c4c9e3249158512b5273e3050dfebdac70d59a3

SHA256
239830a404ce7ca5578f328c1483cc61a1812a0d21aa03361e939946f3d1a4ca

SHA512
dbc2c4093b186562c86460a527d935bc17c8e690d33dc739b72c0b7988c0a25eca072143679e77b6625e6dd4762063a2eda6f6c84d1113de1017f27992c5fce9

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
126KB

MD5
ae90ef2bb2df60d8de9a8ba01ac8b845

SHA1
80a8b094896ccca93cd0aaaf153987356bfdbcc7

SHA256
aff95dc9a0506c2a924266f15b12d4ac6f0c38228a207a62af504c787425c64d

SHA512
166561337b8e80ba207e67c133601ae68e8a4460b43f0baeb0db46fa406b01b72226418202025f9a27308db06819f845e97d7f969196e731c432c27615cf7373

Download Submit
memory/1824-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1824-644-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads