Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
08/06/2024, 01:34
Static task
static1
Behavioral task
behavioral1
Sample
7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe
-
Size
66KB
-
MD5
7ffe025947477656b2fd33dfe1187990
-
SHA1
a4061e92ecb197d9cc681359a5669bd5ae1fb80c
-
SHA256
3fd01ecebff2f55154afd3feb09a52521fa8caf9483296a1f909545869fb0bd8
-
SHA512
a4b30b1181d24742681bf3cf131efa91b5f517c1fc3ab3edd87d57f3d889b42a19cf3aba2d5a40a9caed23baf54025437355c0a79b8c306d8622f8521a6080a6
-
SSDEEP
1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOMWpiapil:6e7WpXYvnximil
Malware Config
Signatures
-
Renames multiple (3728) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jre7\lib\zi\Asia\Aqtobe.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.DataSetExtensions.Resources.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\jawt.lib.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Cancun.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\settings.html.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_snow.png.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunmscapi.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\PresentationBuildTasks.resources.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Data.Services.resources.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\default-browser-agent.exe.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\fr-FR\WMM2CLIP.dll.mui.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Defender\MpRTP.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\it-IT\sbdrop.dll.mui.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\main.css.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.jpg.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\gl.txt.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Adelaide.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mauritius.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\da.txt.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\bod_r.TTF.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\PST8PDT.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\js\settings.js.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\msadc\msadds.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Atlantic\South_Georgia.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\WebKit.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\ink\dicjp.dll.tmp 7ffe025947477656b2fd33dfe1187990_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
66KB
MD5bc163135ac88489e27120d86a301da01
SHA14e9a54e4c902abaefbb4b770026ca0aad3d0924e
SHA256f767390d44e1f7f9c4ad09e54136cfbc72e096dc612b456bca1ef16ce86e7faa
SHA512e96fd68c18a76cfbe957e7e48bcd9d852307c9fb5f81119f231f2b87f48af6d1671c89db5625d325795c8904d40e6fb666f2f932029546d94df09adf316881ea
-
Filesize
75KB
MD5e92444d26ad80ab2340c6756ee770c0b
SHA1e3a754abd9cd5d1ae93402d15c5765cd79732c6c
SHA256fccb80c3f0d028516d354e081d6ffaab62bea5308a88b6ddd0e92486d80a0a7a
SHA51276ec09af4658d881cf3147942533461370242c59bc220cc0946cfb386f6d9987efbb9008667da7a453c7de0795aca6d212bd5678f44a3b0b2d2aaea7fdb7b3c9