2f6b8fbd862eb5bf3053561520b3368ac305c2d4005ea9062ee8f21622296e0c

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15/06/2024, 23:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
Size

316KB
MD5

c44dc0c185aa9aadffdea5ed13cefd10
SHA1

6c55b67748b0bc03eadc8c23031add8c887c58cf
SHA256

2f6b8fbd862eb5bf3053561520b3368ac305c2d4005ea9062ee8f21622296e0c
SHA512

97c6f3dee117657eb27f062379142409e3cb481f529b10b0c2bd6d1a68b8f347f981c70ee9c9f3a8f4b49c855e92d424426c6defb5ee863d4bc71185312a714a
SSDEEP

6144:tFPxPke+eIr9RUxfKIuqBcKxNWdp+bkrdHs1lpaSL4vtI:3PxPir9RyiIuGcKbpaSL4vtI

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2841) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\InstallCompress.iso.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-9.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\instrument.dll.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\ru.txt.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\SecretST.TTF.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Brussels.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\af.pak.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\Hearts.exe.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santarem.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\javafx-mx.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port_of_Spain.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\firefox.exe.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\uk.pak.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\ffjcext.zip.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\jaccess.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Khartoum.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\pack200.exe.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Srednekolymsk.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lindeman.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yakutat.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Indian\Christmas.tmp	c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c44dc0c185aa9aadffdea5ed13cefd10_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

Filesize
317KB

MD5
46158e3a5252dc06598ef92069dc23c1

SHA1
797fe5d9671bae24bfe0a248f0ae2d5b75809437

SHA256
5ef3d9bced3462098024da71f9618bca2a894d32b3c3f9242e85d76c1e83136b

SHA512
04cda8f5f99b738d290a08c6af32fc37e330ac0fefd5ab1a060b1a82ba2faf65af4431229f447a770c2d2a8b35eaf7a132d1e5c53bb80cd81bc2ccd67cb395b0

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
326KB

MD5
6c257684313f5da4785a0d4596c73264

SHA1
6af107d4b7843d1cf3de68151178264c0388ff11

SHA256
d8d4881adc775fc9e7067fb26a8c239a3c63c54167dd2e1c8dc3a5f043b5c28a

SHA512
3ce0bd5413569d8948a0ed5a8fb611e5d8065008b40b80eb74b16c9894616865c1f78e6f96093786b5e230880979a69211d12967b43a7389b2831f13d704c9cc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads