df65fcf586b56190b1ab6ad5ed234e945e338bd0c2a3a488a4d72f0bd9c95fa6

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-06-2024 12:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
Size

91KB
MD5

d67a3f9f2762cebf532897092e1060f0
SHA1

606feccf736b041779374f49285798e024c5e61c
SHA256

df65fcf586b56190b1ab6ad5ed234e945e338bd0c2a3a488a4d72f0bd9c95fa6
SHA512

452bcb5c59a31bb898bf1d5cede2c948fd17b97671dde4930c191116debbba2d44d925c611d3b03d19a42dbb9fd8db2d1ac5467f79c4fb23b5535cd51781a8cc
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/m:6e7WpMaxeb0CYJ97lEYNR73e+eKZm

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3459) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\psfontj2d.properties.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ne.txt.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\BackupExport.001.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Bucharest.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\bckgRes.dll.mui.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Salta.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\ApprovePing.wma.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msdaprst.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IdentityModel.Selectors.Resources.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\de-DE\JNTFiltr.dll.mui.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh89.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\plugin-container.exe.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InkWatson.exe.mui.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\audiodepthconverter.ax.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.security.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Tijuana.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rio_Branco.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\javafx.properties.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\ja-JP\Journal.exe.mui.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\oledb32r.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Windhoek.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\icudtl.dat.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libasf_plugin.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\fr-FR\PDIALOG.exe.mui.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.jpg.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Data.Services.resources.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden.tmp	d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\d67a3f9f2762cebf532897092e1060f0_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp

Filesize
91KB

MD5
bb370db38f26fc42361608553ded9220

SHA1
acb78d438135c951fbdb00872e729b03b926dfc8

SHA256
89dbe154e161ebac42fec13b320d1ebc0863efd46b8e2a9e25da57506734ead4

SHA512
5c0d9f917464716cfeba1240b9345c41db5f7b18a60c4098ed2a4635e66e56dd075933905d9f0b84c85b59429a305452ae474089b85bd005d121daf43d5a23fc

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
100KB

MD5
51e4c5c0161b4bd15d6f360bd2722f20

SHA1
e0f509936c131e96208b133bf976148202d3835d

SHA256
e8f89fd4ae5b88cc99266e24771a8f758143f10e20d937dec1634363467ab5d9

SHA512
3de3f56d6dbf20d94640014ad97fc90318b0f2a9623458fb072b3e041773e2b8ccef4f87a88dcda556bb40144c8b456967fa1cd4fd021c3ac1d257e4968709e1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads