cff5c9071f32593e7c7333ac260b79c6cf092450545aa0bb7c749ba82f44d674

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
16-06-2024 00:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
Size

76KB
MD5

c7a3bd62f5a23255826cbd24f4e9f690
SHA1

3eccf2bcd4623b748f7bb997cf8ffb4d5b7bcfde
SHA256

cff5c9071f32593e7c7333ac260b79c6cf092450545aa0bb7c749ba82f44d674
SHA512

bb0160292f15f536e209a757a29639789364c9f2e9c389c6fd0eb11f5216f35e87731f47899f8c1332a984d7b33beb488a6cc8c1db7f2f086a53679522ad4e44
SSDEEP

768:W7BlpDpARFbhYQkQjjI6OvSox/6Sox/hotyuftxtjYJIJDYJIJPwF9hHMZIa9hHg:W7ZDpApYbWjIlE77ufL2e+efZwZ2W

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3433) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\zi\Indian\Reunion.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\fr-FR\JNTFiltr.dll.mui.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\application.ini.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\RestartClear.shtml.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\meta\reader\filename.luac.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Dili.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\he.pak.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Campo_Grande.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\uz-cyrl.txt.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\classes.jsa.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\settings.html.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\bckgzm.exe.mui.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\it-IT\Journal.exe.mui.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\prism-d3d.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-modules.jar.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Choibalsan.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Windows Photo Viewer\ImagingEngine.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipBand.dll.mui.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\MSOHEVI.DLL.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\bg.txt.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\DirectDB.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\glass.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Darwin.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Amman.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thule.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\bod_r.TTF.tmp	c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c7a3bd62f5a23255826cbd24f4e9f690_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

Filesize
77KB

MD5
5db0f711349cd3e6b296fa6220b267ca

SHA1
351bab166a95590cdb506b6bc01e5f5a229b0d50

SHA256
c697663cc72abfdf12b5c25716e10baaece2e9b2334b1d53fd6a68394f4885c2

SHA512
bed716d2c9fd5702d4a361398c099dff82e72253c1a8f94066dc1b828d09154aaed39e70538852af978e0574f9616fbba8a517a735aeaed3c23252847cbd72df

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
86KB

MD5
b5fdfe29c4232bd94c9a6c84544097f9

SHA1
77bad7efc000296c14c0e9fb7958923714efb00a

SHA256
a1451e181e0c6eb6ff9f652735b63d83014617183b16a19fffdba2daf8350967

SHA512
bcef26ca3544d59df20a4087b6770eb4969c96f6bae189d489f26cdde7213719992438e8d54ff6d54cdd27d77b4de4ec17837ec8f07003732db96005e37040fd

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads