225236c1f7d9905ef737914a9dd9ef7694319860a2977c1c9fb0c067b3d3b002

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 17:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
Size

131KB
MD5

cea4fa71c6d90640968ac57cbe61aae0
SHA1

fa1dab691dde292d2736bdcbbebb0d55a1537092
SHA256

225236c1f7d9905ef737914a9dd9ef7694319860a2977c1c9fb0c067b3d3b002
SHA512

9a7d412fe934184b5d1e068e86a696441846141977d70734f3ae086437bdcd52b51087a939d486e16ea6122b5379b714c5a1f687fbb4482eb519af00d003395e
SSDEEP

768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXBvjfMfvjfMMfQsblBOH:/7ZQpApUsKiXBvzwvzXJvlwJvltb7

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3452) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\security\java.security.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_streams.luac.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kathmandu.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdasql.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\WindowsAccessBridge-64.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\it-IT\Minesweeper.exe.mui.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.Speech.resources.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\schemagen.exe.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Web.Entity.Resources.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado21.tlb.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+2.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\msinfo32.exe.mui.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\ant-javafx.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Beirut.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Merida.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\defaults\pref\autoconfig.js.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.Printing.resources.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\ReachFramework.resources.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\skins\winamp2.xml.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msadco.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Services.Design.resources.dll.tmp	cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\cea4fa71c6d90640968ac57cbe61aae0_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp

Filesize
132KB

MD5
557cff4ee5be0b4e642c92259b75ebb5

SHA1
ba9262e9d35d0d5b0b4e4ae234ad1d34be75c575

SHA256
4d83a69a7e6f570995b45f185208774d5e12d77c8ad89bb4969c39ec576a7514

SHA512
5121e5232a8cf8d10019283c5035a855f4c1d2397adc2ef833bff6e33a05cf50f39f8a7efabfd9f88c66515c66b411d7445cbcbff197a44767a452b03333c440

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
141KB

MD5
e042cb5bd2c7f879e6cae5da4b48038b

SHA1
5ca6f2a02723ba458f7778a72e796b30f47b4e32

SHA256
3c8330295df6409c37b17130007bbc563522c77cc24e2cba6e4c6eb87f8e817a

SHA512
75a4c01da2cf7514d4698c4fb322c64b50c097905da02a6f1d164c294153c217a1ce85c69e9210e8652dbb0e0c2289452d4a3feadb4426bfa5b505a1d9191e19

Download Submit
memory/2396-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2396-608-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads