e9b536a3359030bef54f302b7beb25bb2194bb72c12d1f6c4a57e2da19c1440f

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 06:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
Size

77KB
MD5

9f75355afc8b28c726c3bf2252076e80
SHA1

7bfbfda1f07131ac93ce759fbcc36c2764e144ee
SHA256

e9b536a3359030bef54f302b7beb25bb2194bb72c12d1f6c4a57e2da19c1440f
SHA512

c5fda34c5d64c169d8fbb697d6cfde57502360a1d5189adec8dd853949313f1957ffec3c4c867c9fdbd6347f60df6c7eff5591e193f9d0127bde151156d71ea2
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7YWtMQQQh:6e7WpMaxeb0CYJ97lEYNR7Zt1

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3690) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\mip.exe.mui.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\security\java.policy.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Kamchatka.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\StepRegister.xltx.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\vlc.exe.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\gadget.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fr.pak.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\GrantAssert.vst.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIB.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\rt3d.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jpeg.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZX______.PFB.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\mpvis.DLL.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.DataSetExtensions.Resources.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\classes.jsa.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_disabled.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\de-DE\settings.html.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\de-DE\NBMapTIP.dll.mui.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\WindowsAccessBridge-64.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseout.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\ja-JP\wmpnetwk.exe.mui.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\nl.pak.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\w2k_lsa_auth.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\sawindbg.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\es-ES\slideShow.html.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\SecretST.TTF.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar.tmp	9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9f75355afc8b28c726c3bf2252076e80_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp

Filesize
77KB

MD5
655ec9210f068340c5b22b23c89eef49

SHA1
051891b3eb71b37ce3118c4fc2acb5f0ce7551be

SHA256
de55449f68609bd95b5143bc56c627d146e1ed6bab4140928ad12c2bbf29d026

SHA512
2b6eef558131ec433930526854c639203802a39486fe9f0242b8b637ff37f249582e5216bf5bfab709240bde940b997ff94e6c9b05c3d56fedcf26f4445d34ff

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
86KB

MD5
dd60c40c625c7d5781a47587f89a3366

SHA1
f0cdd7830eca5563cee9c71703a7ec199e5c1fe3

SHA256
f5fb561e864e28388ca4b0135dcb4c1143d6582f9952a06b1e9f5f7502f76268

SHA512
379fbd21a36bd7b25d46989f9a4f96c54c443cb711206ce33fec7672c4cfef5ed4187d2d854e7b589ad0c27a94e15937d1981b3b74365851c2422f0f15353fb6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads