c8ffb2ee1cc0cde507f766ffce8c914de328121b53dc46b45a87ec0b5618a189

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 06:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
Size

83KB
MD5

c38e77689fa9e1b623532e5c0b7ba1a0
SHA1

678d52e2ecda21c1b827a93d60ca6d39abf3a4e6
SHA256

c8ffb2ee1cc0cde507f766ffce8c914de328121b53dc46b45a87ec0b5618a189
SHA512

18220cec7d788d37da5300ceddfb8743761bbda3375ef8952aed7bebe3386b4735ddcc3341d4ed371163386e4d936df51f218a3c6b7b14b90631c8f36d57c410
SSDEEP

1536:W7ZDpApYbWjIlE77ufL2e+efZwZavliSiW:6DWpwE7oL2e+efZwZEiSiW

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3441) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\System.RunTime.Serialization.Resources.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\fr-FR\DVDMaker.exe.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Hebron.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\fr-FR\jnwdui.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\activity16v.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libttml_plugin.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass_lrg.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\management-agent.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Bucharest.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\uninstall\helper.exe.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Vancouver.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\dt_socket.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipBand.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Chess\fr-FR\Chess.exe.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bn.pak.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\Stanley.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\WaitConvertFrom.mov.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\sound.properties.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\crashreporter.ini.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\mozavcodec.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\ReachFramework.resources.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\DiagnosticsTap.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\de-DE\TableTextService.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Cocos.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\El_Aaiun.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Los_Angeles.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll.tmp	c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c38e77689fa9e1b623532e5c0b7ba1a0_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp

Filesize
83KB

MD5
5009263b50a63e79827b098994e7469f

SHA1
d612a13735e861f14935561e51367d26cba15b64

SHA256
a19945bc882151dd1a6d2cf3d3a79f17cd81b969792f95d1ed514367094418ee

SHA512
b58c383c5d7413092caededba31d6b5663e7350448ce044972fe7b1cfa5cfa367edcaeb60b0f687468c2743f3f21635a4caae8869c700fdb993bab1f54bf1029

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
92KB

MD5
7d2d6fdb6f280be1165323b7c28d6905

SHA1
5c8f501283f63a1febd4a7161edef135de6c4e32

SHA256
d91f268cd7eeed518d0f0e5c69aae50310b54beee74b845daf9a2b96e558cf85

SHA512
1460ae2ebfbafc8be6038e2afc85bf9339c95f5237e43681c0fb08e3e2bd44409331f14b53e2536092b19224b65aac9c84a4793ffb734ecf6bee4abf0eb6ae86

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads