Analysis
- max time kernel
150s - max time network
118s - platform
windows7_x64 - resource
win7-20240419-en - resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system - submitted
12/06/2024, 23:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe
- Size 78KB
- Sample240612-3ffngaydnm
- SHA256 1c54b638e227b1ba4e3d6b8eef5d9756c8d14b217bc9a811f7e54c0055357d37
- MD5 4caddeef411e9d1b85558640b4a89920
- SHA1 b09cedfcda4268ed1cc0a28fb1be25b465357c40
- SHA512 d0a4cb99940a6fd87cfa4605a16e87d32895ed9ba999fb340234171b80cbab0c382df4ac1d34148bcd4cabf5317d986be44349c57af621f285498a4803574905
- SSDEEP 1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6b+W+V76uSw:6e7WpP9oVLQthbYY9oVLQthbUvD
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Malware Config
Signatures
- Renames multiple (3600) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\settings.html.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\cmm\GRAY.pf.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\chkrzm.exe.mui.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\bin\rmid.exe.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\da.txt.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\rtstreamsource.ax.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\css\picturePuzzle.css.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\fr-FR\OmdProject.dll.mui.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Fortaleza.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Boise.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Guatemala.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Montevideo.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\libvlc.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\ja-JP\gadget.xml.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\cpu.html.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\LICENSE.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\deploy.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\es-ES\WMPSideShowGadget.exe.mui.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\wmpnetwk.exe.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\gadget.xml.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-10.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\ko.txt.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\lua\http\mobile_equalizer.html.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\bin\JavaAccessBridge-64.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\platform.ini.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\NEWS.txt.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_dot.png.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\WET.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Defender\MpEvMsg.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Media Player\mpvis.DLL.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\fr-FR\gadget.xml.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Gradient.png.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Merida.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\css\currency.css.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Aqtobe.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Nicosia.tmp 4caddeef411e9d1b85558640b4a89920_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp
- Size 78KB
- SHA256 44cb38aa6d86801f4fa56e76eb1b33a1a87a62418db5d0ebdee24d1fa7262a9b
- MD5 4d6993e35fa0bf538410f93d6fb532ae
- SHA1 85e2945920ee46bfc958d0ffe328b1c968e90e0d
- SHA512 24af27e96497f359f3f854100c6c33b4b33f7b49daf38ab20f56beda9c8efdfacc151076b7f65614ea1649a0ccb7063ff0dd18e98d83bdd48fabcc7b49b268d6
- SSDEEP 1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6b+W+V76uSu:6e7WpP9oVLQthbYY9oVLQthbUvZ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
- Size 87KB
- SHA256 f60c878b2456a44b4315a22af3504ed7b65c0f0c6f7ad7cec9c8aec118a27550
- MD5 3026f78cc165949d51bd994ffa6a63c5
- SHA1 34542c95eb4c13fb2a2cb85a326361667dfd99bf
- SHA512 6b9ecd6a0e3e7d75ddee90368d54e22972c37a5be94c15e9c8928d8442ede10379bc7a3f9cf69dc047ee5e580df2a07ce30579d55cc20194428ac94401573edd
- SSDEEP 1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6b+W+V76uSE:6e7WpP9oVLQthbYY9oVLQthbUv3
- MD5 SHA1 SHA512 SSDEEP