1302c0962ee3736438f152fdb906e982b00314799344e0e9d39cf228b9d7bedf

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
31/05/2024, 19:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
Size

68KB
MD5

9c0ecf472007736ab5b3c9e2fed1d790
SHA1

947797df69609049195c1622e8cf6e6459db4396
SHA256

1302c0962ee3736438f152fdb906e982b00314799344e0e9d39cf228b9d7bedf
SHA512

62222a9bee1d21f421a6a957367fe5ac9cfd83e856ac984ee9826176279a140b46ff64fa52eb7f69fed0dc41bf6a40a129927e2e44873e840b22993a424a89cf
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEha:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsX

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3443) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\core_visualvm.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\bckgzm.exe.mui.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\firefox.cfg.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\La_Paz.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ru.pak.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtau.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jfxwebkit.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Tijuana.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\OLKFSTUB.DLL.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\hi.txt.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\IPSEventLogMsg.dll.mui.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\wsimport.exe.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Matamoros.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Windows Photo Viewer\en-US\ImagingDevices.exe.mui.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_left.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\7zFM.exe.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ku-ckb.txt.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\sr-spc.txt.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Adelaide.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\LimitMove.cr2.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.DataSetExtensions.Resources.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\cmm\sRGB.pf.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\gu.txt.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\THANKS.txt.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jsdt.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\w2k_lsa_auth.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\security\blacklist.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Chuuk.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\en-US\DVDMaker.exe.mui.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Johannesburg.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Amman.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\splashscreen.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoBeta.png.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.tmp	9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9c0ecf472007736ab5b3c9e2fed1d790_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp

Filesize
68KB

MD5
a77ffbeb4fca232acc9c5fae00aa9cf0

SHA1
da9abc36352609fa2fe73bb9d56ed9dafcffd44e

SHA256
810cc78056642095e9daed49a04c5b1ac44f36321042a2ecc1636b78c58e5a2f

SHA512
c3087f268565f3d3260a88c47f636010052cfba78b1a9879ddf4ccde030e6e65315b5923472a23cfff1f1a8ec57d6e495e8a39bdd4fb011095a046d162232bb5

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
77KB

MD5
632dfd76fafde906a6119e3c5f1e8713

SHA1
5b63a20287bf4a5653ef3bbc742fa434d2716e01

SHA256
51ec4fad4e55e2028111046526eff54020ba778542b972a9b78db198731c7d56

SHA512
6b1e759cacefcfbc6e779be5a2d5da1c4158e4bee9e1bff81a23fea6d835b55d212f57167b6aad8d79672b12b0d3391f32ebfa3b70e77dc72be3c3350f3c602a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads