Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
17-06-2024 06:55
Behavioral task
behavioral1
Sample
5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe
-
Size
69KB
-
MD5
5d57aa7283a0a7f8d0878e0211bf3be0
-
SHA1
2bb24e5ed342649bd780156b723a5f00c75f057e
-
SHA256
df5ed30a7f8b9ad8ceeb523c542d0d76cdb6489cc3b14129068a8e94eba0f26a
-
SHA512
f8a7f122276556daca887216f2454e6f4ed4912d3ccfdf66e20ca574e19d1e3be4de9a619199c3693a367558fbd3f33e8a249887c0d626e8ae2697f99d34442c
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8S:fnyiQSod
Malware Config
Signatures
-
Renames multiple (3490) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
resource yara_rule behavioral1/memory/2184-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral1/files/0x000c000000015cd2-2.dat upx behavioral1/files/0x0002000000010679-6.dat upx behavioral1/memory/2184-646-0x0000000000400000-0x000000000040B000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClientsideProviders.resources.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Asuncion.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\msdasqlr.dll.mui.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yellowknife.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Windows Photo Viewer\it-IT\PhotoAcq.dll.mui.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\msado21.tlb.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxslt.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\UIAutomationClient.resources.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Reykjavik.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Irkutsk.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Volgograd.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\mozavcodec.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\WindowsFormsIntegration.resources.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\America\Godthab.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\css\settings.css.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\deployJava1.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\meta-index.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\gadget.xml.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Berlin.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.RunTime.Serialization.Resources.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\ado\msador15.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsoundds.dll.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\browser\VisualElements\PrivateBrowsing_70.png.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo.tmp 5d57aa7283a0a7f8d0878e0211bf3be0_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD5dce044b9bd4dfc9c1b17b429c6278d78
SHA101d996440208647fc2fd8c7d9b2b4d765d269fc2
SHA256b141b9ade6a4ebacbc7915c20008559889c1762d66379f198fb6da1991e2fe2a
SHA512053de23477d19d98a0dc5a775e0e0e0fb2cd652104fd41843c927f4b5f2c7eebe75afb95e8319c71fa72170f366baf64a0ae8255e0588ccd5c381cc438544bc0
-
Filesize
78KB
MD5301d97be4d9b137d38c4cc17a2293aab
SHA12eaaa87045c48555b83e75b0a135d73c9687e178
SHA256c596a930edbb07d3b84eca19753b2fd4f44f836b3ad43d7b5cf9895dcba458ca
SHA512ff30262cd6025f22b685f0ff9dafd012144c0e2af8ae1492f695f0bd54999fdf29839bab49834a90b35e490d062e89df74f478a579410bf8d049d1c992b95e64