22ae640258b2719a963fb9c64411ebaf9a2bdc6406c91ad54c98577993ebc792

General

Target

07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
Size

81KB
MD5

07fdf5b2128ab66ff2558719d8b4ef80
SHA1

11a6a78f7b47649dd37df183859af664c857d921
SHA256

22ae640258b2719a963fb9c64411ebaf9a2bdc6406c91ad54c98577993ebc792
SHA512

6db554c404a5f47b8f452b669460e414c5eb38223ca0da5fb23d1d09653701bd7120a50f18d6a781e1f57c8fe3d2b3b03aa8389e44e7bb8df201c0b26d360769
SSDEEP

768:W7BlpDpARFbhYQkQjjI6OvSox/6Sox/hotyuftxtjYJIJDYJIJPwF9hHMZIa9hHu:W7ZDpApYbWjIlE77ufL2e+efZwZavi

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3436) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-actions.xml.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\NewDeny.ppsm.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\en-US.pak.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ashgabat.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\es-ES\PDIALOG.exe.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tallinn.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\Common.fxh.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\jfr\default.jfc.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\UCT.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_m.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\gadget.xml.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+2.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\cursors.properties.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Data.Entity.Resources.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\gadget.xml.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pl.pak.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Antarctica\Syowa.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\unpack200.exe.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\de-DE\sbdrop.dll.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\sonicsptransform.ax.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Vladivostok.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.IdentityModel.Resources.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\ehshellLogo.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\pl.txt.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\InputPersonalization.exe.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\vlm.html.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Hebron.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfontj2d.properties.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IdentityModel.Resources.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libt140_plugin.dll.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo.tmp	07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\07fdf5b2128ab66ff2558719d8b4ef80_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2297530677-1229052932-2803917579-1000\desktop.ini.tmp

Filesize
82KB

MD5
48dfc83cbc974051e822f8766c6e497a

SHA1
b6bf0db8aecc10a6681891e480073ba4f5c76b9f

SHA256
38d30481bac9eb1058a113a683ab747e9c51c99e4ef89afe0f4df800f7aa887e

SHA512
b4cce6aba2670c97c78b9c6675fef28ee24c1ee15c93a232fde49d23e660546d2e780f4a641ff38c7202f479673ca57ee4494fe0017634ea2e2d65204d765dd3

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
90KB

MD5
8bf384dc4656b29baf5abda9fd46a8c2

SHA1
69d5df607476c122acb9032e0f198f1a081366f4

SHA256
d16e7107934aecdabd247681e7541fbe3e1f88f65ea691743be54bf2adebd389

SHA512
d6f8cd90f1f3d404e4dc5a82113cc1317edf7dd62be5742233a9af1f8cf7d6a66ea4e3a9e4952cadc73a6fe6eb6c7164ed31bd64e96769f1703cd9cb1d5e8327

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads