8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab

Analysis

max time kernel
149s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 08:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
Size

93KB
MD5

846fe0c8e2f2bc32ebe47791c591a100
SHA1

84273d2527f03baae96de3ba439a1600e8af667e
SHA256

8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab
SHA512

d431010c169f09b238d1649e68a9c0ca39d8626337de9757621da7e86c78f66ea2c8144accac73e2ccae7273d293e60789feda93dc3640942894685d47a69007
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6b+W+V76uSsktFElEM:6e7WpP9oVLQthbYY9oVLQthbUv+W2M

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3459) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\fr-FR\css\calendar.css.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Almaty.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\es-ES\Minesweeper.exe.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\calendar.html.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\ja-JP\wmpnscfg.exe.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Iqaluit.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\New_Salem.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Hobart.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\jsdbgui.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Chita.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Cuiaba.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\shvlzm.exe.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\js\clock.js.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\ShapeCollector.exe.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\de-DE\WMPDMCCore.dll.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\en-US\Sidebar.exe.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\clock.html.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\include\jdwpTransport.h.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pitcairn.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-6.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Dublin.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\icudtl.dat.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\HST10.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square.png.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\desktop.ini.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\es-ES\jnwdui.dll.mui.tmp	8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8f64e8b189927740c0c1306bc739f53090e9da9d761a03f3050ce43647a1a5ab_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-268080393-3149932598-1824759070-1000\desktop.ini.tmp

Filesize
93KB

MD5
4f73e955e83ce5b42e420ffe34dfc281

SHA1
650e1ff9e0e9b849db839fc478d30cdf8f9a23e1

SHA256
ef1b8bc0e413808158038c59c4bbf05fcb23073f0dbf072ec1f03ae42ce0e00c

SHA512
0cff733821593bc26cf0595b3ac6619ef84324b4473543f0638b4bb373594fab0cc2b4a1127d9b5dd8336619c0e0bb612aa06e0830f78dca64d7b29d37706e7b

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
102KB

MD5
2314d18f2d3ce0bc583620d02e9e89e5

SHA1
2d5152a5f497747aa145ac6503680397c0ccc279

SHA256
ad4225b88229818aa4914ca03a64f2bf3e86e8b2d608ab8b818f6229968b7920

SHA512
ecc534d31d130403db3a193aa9a281834bd739009e9c70f2754890e9653d8605a0d272a4591dd3734beda644fb366bafa06bb00024896315ba65e7070ccd5d8c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads