df6f0b61ff2f6ec34987955de90fb497ec42d84b3fcdbe142dd0dbaa662815a0

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 02:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
Size

78KB
MD5

578fad7450586bb046ad1668a64a9f30
SHA1

7c99d5c2e38be3c1feb7308b671ac8d8de443005
SHA256

df6f0b61ff2f6ec34987955de90fb497ec42d84b3fcdbe142dd0dbaa662815a0
SHA512

16e03c31cac1878150c91cfb5141f4522b7bc7c091404859dde4f3e5d43549e6a7289fedf9f232e6a71398753f3efe3221845b7f8ec738ce1e6ce6b75b7c712a
SSDEEP

1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696xZ2:6e7WpXYvndS

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3752) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\cue.luac.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_same_reviewers.gif.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\chkrzm.exe.mui.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\maintenanceservice.exe.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\it-IT\Minesweeper.exe.mui.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4ADT.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Hebron.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Tehran.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\icudtl.dat.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Rangoon.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\jfxrt.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationTypes.resources.dll.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\ITIRCL55.DLL.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_fr.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Singapore.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javafx.policy.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\El_Salvador.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Miquelon.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar.tmp	578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\578fad7450586bb046ad1668a64a9f30_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp

Filesize
78KB

MD5
e8393325048a045a6abf1c9b43ed7bd5

SHA1
3da57783c9e05f700cb8c6ef3996f3faa6e21d94

SHA256
327d98eb8952d0ea9af6ae38d299db0af55d9fd89034b53c202f7610805cf1d8

SHA512
c41fd42204f5b50dab2a6ce7aea8c93636acf6516d0befbe7e4da419386611841d04e0025a1fef0004926d113c92b8a2b071997349e04a50500925f8c5fc209e

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
87KB

MD5
7baeaa178de62521791d9883aa041d25

SHA1
35b4903549fe91c051410f13e6991e74509aaf9e

SHA256
221d52b954f84cf472def8d57d1516737cf7427f0719367d616de8cea1c9505f

SHA512
166fb3427acb66df0150983f9b9f9f1b6c35c7e986edff73e1d0267f8800b4883f2b5484573c10e28af5ac41ac9a8119c089ceef9c60d59bbcff41abb58067ab

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads