Analysis
-
max time kernel
150s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 23:26
Static task
static1
Behavioral task
behavioral1
Sample
1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe
-
Size
65KB
-
MD5
1f1ec44d2869f398f73915d6141966b0
-
SHA1
494a091852b7ece13f600a246e483af2648e5887
-
SHA256
58b0c55da6454122cb072be41dc2df495cf3fbb31ff90b1d74502dfffde51d49
-
SHA512
422cd9326f3a0b7ce04767470e965028d5c27cd9a542e3e11c9a4bb531e908f15672ae77c4db7d706b13f4597e40889df168690166a0ef103ce62e253968bb75
-
SSDEEP
1536:/7ZQpApze+eO888888888888888888888888888888888888888888888888888F:9QWpze+eO8888888888888888888888o
Malware Config
Signatures
-
Renames multiple (3704) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\es-ES\Sidebar.exe.mui.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\it-IT\css\picturePuzzle.css.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\msado27.tlb.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Athens.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dushanbe.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\wmpnssci.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\adojavas.inc.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util.xml.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Net.Resources.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\skins\default.vlt.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\Media Renderer\DMR_48.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\DESIGNER\MSADDNDR.DLL.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-output2.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server-15.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\it-IT\DVDMaker.exe.mui.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\ja-JP\WMM2CLIP.dll.mui.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\La_Rioja.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Office14\MAPISHELL.DLL.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Gradient.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\npvlc.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\rt3d.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240389.profile.gz.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\SpiderSolitaire.exe.mui.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\nssckbi.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Entity.Design.Resources.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jhat.exe.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IdentityModel.Resources.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Windows Defender\MpClient.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll.tmp 1f1ec44d2869f398f73915d6141966b0_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65KB
MD5e567430d603f28e7f987d5bf25a93814
SHA1a485586cd6e8eb045dba510df05853a72355d13f
SHA256ff6a1170301acc0b66b9120d299e0292c7abf01e99198c3055584c6401588c65
SHA512cfd96ea87ffde2043539d74229575dedb36e244d2f8ab57a476ae716b511914e22f213691f2c7f65fc22b844f00906ee5eb16d8fa1088acb2d6cbb79069d2d17
-
Filesize
74KB
MD58ad38e3d8f8ef6f4ceda7f6ad9c4cfb4
SHA11a7e92e52d0331368a89fc40a893b9b3c44466eb
SHA25678874e0826645641d74555f21d5bf26035edc5b566268aa203710bb88290632b
SHA5123b62e5404fb7c433a528e0a20dfedf16d79696cc68c429df094f7abcdc8e65657378109ad62a7544102491555716e969ffc3287fcaaa719b59765654588a4a68