6f1fcf2d77c3509ed8b67dbaf166050dd0a8a71641bd9b846e8afe3dd422e696

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 05:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
Size

77KB
MD5

20261eb08d6217be83ffac859458fa70
SHA1

c87a710337eb8691690b26a97e7edb8b4b1cc304
SHA256

6f1fcf2d77c3509ed8b67dbaf166050dd0a8a71641bd9b846e8afe3dd422e696
SHA512

80f428f7bc1a527e461ccc66c2d74d812b9da5f7ca4e202186fa58b4c4a19fd4e45f2a3e0df19eb42786580b0977e58945f86646367618a8b1d32ba19a85169e
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJo9r9Q:69WpQE0zTZQ

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3268) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Perth.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Jamaica.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\derby_common.bat.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ms.pak.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson_Creek.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\bn.txt.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\StepTrace.bat.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClientsideProviders.resources.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\sq.txt.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\deploy\messages.properties.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\master_preferences.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\invalid32x32.gif.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Maceio.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libmod_plugin.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\favicon.ico.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\COPYRIGHT.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\More Games\fr-FR\MoreGames.dll.mui.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Chess\Chess.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\jfxrt.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javaws.policy.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationTypes.resources.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Madrid.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Services\verisign.bmp.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\glass.dll.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jp2launcher.exe.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\FlickLearningWizard.exe.mui.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\LICENSE.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\vlc.mo.tmp	20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\20261eb08d6217be83ffac859458fa70_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

Filesize
77KB

MD5
5d65fcaeb13f4acf654c9a8debef3e5f

SHA1
2e2bd6595b1c25ba6a72257c5d66590d33028a83

SHA256
0927b771febe17a4e7723bec545164158b8617cbda896efcc2f15bb8af3c71e6

SHA512
faa6227cf197156f11d0560791bbbfa1dbfda010ec82d756cfb2e1a19a98ae4cb7348b56a195d6b973b4e67c9946a559cbd9959d45d3e628c9637734a548e509

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
86KB

MD5
1c79f7169824b7604ad9c4b2e68bb046

SHA1
fadec04b0077c10c084d44beed2b44cf90d171b7

SHA256
248d1b44a6b3258ed4260a3381f19aae5b2492879234063580b4f681f52751ed

SHA512
33e451a99513cfa74dd0821905832b593eeb0582254fd262b92ff55b85df93db8039be6689d1e086992eb948adccd7dca67bb762106755fc99d554b3398af0c3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads