Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 23:39
Static task
static1
Behavioral task
behavioral1
Sample
1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe
-
Size
370KB
-
MD5
1f70216fc25d3c8a4f24c0f4378e0790
-
SHA1
68bb003c0eed892196065aa20d8bc569886c8410
-
SHA256
d69794895e7d982b09b09ce4a03d3927930a6f690a3e55d5d1d65193cd379f1f
-
SHA512
84fd26bb4e142549f795428d308be10fb82fbf23cc8862880eb4a3cb02f17416796d6f35d80a818aec88a8f7ecd7e8ae2a560a252ab392c9829fb8cf471a8e98
-
SSDEEP
6144:tFPxPke+eIr9RUxfKIuqBcKxNWdp+bkrdHs1lpaSL4vtFVHPyvewDpgs5:3PxPir9RyiIuGcKbpaSL4vtFVHPyvewR
Malware Config
Signatures
-
Renames multiple (2767) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-nodes.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Bahia.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guyana.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DissolveNoise.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Novosibirsk.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Internet Explorer\pdm.dll.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javafx.policy.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Aqtau.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Madrid.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msdaremr.dll.mui.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\si.txt.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Cancun.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pyongyang.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Samarkand.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\bin\jpeg.dll.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\external_extensions.json.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Rankin_Inlet.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861261279.profile.gz.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui.tmp 1f70216fc25d3c8a4f24c0f4378e0790_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD516d2af816fbc8f8360c62af1678845b5
SHA14ef51724a86b3147d1a6cadc235dc4691f763628
SHA25696e775bfaf872bf7f21eaa3def0b05e6c41d2b48e91850b744a68af16d66905f
SHA512efd700bf26df6e6e57a139977b3fe8b89e633285f84224577d1d2a5ebe3af6ec3801aa268703e7f45e64cd32c17431d3a3633d35ae993489ae8e34361aeca1c0
-
Filesize
379KB
MD5e3aeccfb3145b48348976e7f3a314305
SHA18b3896571a06234e663f4edacf132df06dfd73cb
SHA256aea13bd383f99875d38b621ea5277fbeab0cad89d67cfe10d03822e571f960aa
SHA51249bc47d0b679dee9d5342133f91ebbb9b22df1f4fdd1884700ae83ce1e06127116251ade28da15b917e5d547f2b818708db4a82c319f4052fdcfa2d00d906a7f