b3d93d56de1e560980741059ab6ee9a3c375d3db7209943519563b2f439381d1

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
05-06-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
Size

81KB
MD5

3ceba9119b8aee5ad311a7f85a754580
SHA1

f2a2d05fe741d354f25bfc950b289292786c1012
SHA256

b3d93d56de1e560980741059ab6ee9a3c375d3db7209943519563b2f439381d1
SHA512

65d059a2131bfe14feff74ef48be0263e567b093cd2f9b89bdaf70b7df2eee0f55227e46e1801de9246635b308c37b8ee1d353e603e8b8616a23934aba0bf595
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7tUyCUyCd:6e7WpP9oVLQthbYY9oVLQthbUrt7t44d

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3449) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\js\settings.js.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Srednekolymsk.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\currency.html.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\it-IT\JNTFiltr.dll.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bishkek.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\offset.ax.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\defaultagent.ini.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\Microsoft.Build.Utilities.v3.5.resources.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-3.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+7.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\hr.txt.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\ja-JP\WMM2CLIP.dll.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\flyout.html.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\it-IT\SpiderSolitaire.exe.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsound.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Perth.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\INLAUNCH.DLL.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ru.jar.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\HST10.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\7-zip.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoBeta.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cuiaba.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png.tmp	3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3ceba9119b8aee5ad311a7f85a754580_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp

Filesize
82KB

MD5
eb67807907e52ac2011881af7863cb84

SHA1
78d1038f17d55ad613624f1c2a24bb2e7bcb5d9b

SHA256
a1b75c336c550aa508285bea038dc411dd158f1a3008d483335f24d4913046f0

SHA512
401b223ef37d9b281e3297d6f8dd1de35498f4b8462f350b92ad5bc72c67ecfdfd98e68606ee40d28278c0eeed90fae2378aaf5906a4726dc174f6a996f07746

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
91KB

MD5
35c7d72ce576581b4572ecce715c5002

SHA1
cabb21177c4d3adf5e6680fb3018b060c9ee7fee

SHA256
8a41fe7cf5a111acfe49bee7f0112f2ea0399316601954b27ed2a82debac3b2d

SHA512
2374c3defaa82ecef29d766b402038021c292e19616fbbbdd8cd59a6766b3220ad1575ae21b5ac9ab2a30a3b4b8552cb7e4c1e3eb85de5039adcecca3a145d17

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads