Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-06-2024 08:55
Static task
static1
Behavioral task
behavioral1
Sample
6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe
-
Size
97KB
-
MD5
6e6abe0ed3fa07d643bba842ce383060
-
SHA1
f1afef4b06d887b21a69e7e2ed0ac6aeebdc9155
-
SHA256
e7a1606cae998e23061f56b693534ecd48a3ac4cf13e732c6f329f6bad257040
-
SHA512
6af43d771247e8a0d8c4b511756ac18ed8f36135f4d0522112c10a23bf9eb0291997767468a1027b75a4ad6288f3456973902e8407234b20eab11bee8658a952
-
SSDEEP
1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/DMQBr:6e7WpMaxeb0CYJ97lEYNR73e+eKZ/Br
Malware Config
Signatures
-
Renames multiple (3447) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Pipeline.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Shanghai.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\bckgRes.dll.mui.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\defaultagent.ini.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.exe.sig.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thunder_Bay.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\updater.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IdentityModel.Resources.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Journal.exe.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Dubai.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\softokn3.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\7-Zip\Lang\hr.txt.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationProvider.resources.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Jakarta.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Samara.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Marquesas.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hr.pak.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santa_Isabel.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\content-types.properties.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\PresentationCore.resources.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\it.pak.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\bin\libxml2.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\bin\WindowsAccessBridge-64.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Common Files\System\msadc\msdfmap.dll.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Mozilla Firefox\browser\crashreporter-override.ini.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe File created C:\Program Files\Java\jre7\lib\zi\SystemV\CST6.tmp 6e6abe0ed3fa07d643bba842ce383060_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
97KB
MD54cd6ab2e4d49efddcda9e133a86d409a
SHA13dfb1451580ff851014441fec9f3d97b256b96b5
SHA25650ae3c289a5d7d8cdb97a303c03725ab4b2eb8a5e86d96e55780467fda39d224
SHA512b24b154b598ac1fc9eb6b4dd0fa49236d5bf3512c73b805893a96a81fa298576ba8fedddc2166b8c45f85faee2aba87c397b75d40ba77032fed9c09850e2d55c
-
Filesize
106KB
MD5dcb3768897e0bf96c6fb59a41606026b
SHA12d0e80e6e0e8918c6b5bc3dfd13504dc9a387413
SHA256ca9a52c86afba0d0a8e9dee85e9761635f0488baa8afed73badfc3a2ef4c9787
SHA51276f7e56b057bdb428496bbbda6c67f326c98784f40f4f9cab20e0873c586730250ecd1016aa08396f39349a08f996908c7bdfddf350055cecb0372bff3701395