00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f

Analysis

max time kernel
150s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 21:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
Size

53KB
MD5

9ef8263b64dbe60237c00c384352ef20
SHA1

039fd8732e5da359cfcb5ffc55d5aa034e17cfb4
SHA256

00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f
SHA512

0a1ab03e079717d4b8d45b062a9b67e5a6a0051b791311c79856c09b6a731bf9e413d62cebb6d29d1d2172d9fa8a7ccf59762772aa9e40effc8eee8bc36ff2c5
SSDEEP

768:W7BlpppARFbhbt7Y7zPhwyPhwdOwOfG2c4LczqNn:W7ZppApIayaz2pck

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3754) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\eula.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pyongyang.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-11.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Data.Services.resources.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\js\weather.js.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Nicosia.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Melbourne.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\security\US_export_policy.jar.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd.otf.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\LICENSE.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\ir.idl.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\System.ServiceModel.Resources.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\fr-FR\MSPVWCTL.DLL.mui.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tr.gif.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\es-ES\WMM2CLIP.dll.mui.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Berlin.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\ReachFramework.resources.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\js\ui.js.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\es-ES\OmdProject.dll.mui.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+7.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.ServiceModel.Resources.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\fr-FR\css\calendar.css.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\ja-JP\gadget.xml.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwLatin.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\eo.txt.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vevay.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\msitss55.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9YDT.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Ojinaga.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Entity.Resources.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libttml_plugin.dll.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png.tmp	00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\00c5d15e162451734c5eafe907227cb0e7f9ced6b7075fa5133f07b2f1f2cb3f_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp

Filesize
54KB

MD5
b1109c295127eeb5ded3fe2b84f1ae61

SHA1
76895cafd54d3cfcada0a75977334262ea4c70b1

SHA256
24f8ed99a0e2afb4700c4427d5730d564901a5e7c3ca4fa61a29f5fd5037d491

SHA512
4a2ade7fa55985dc89c4242a2bb6ef75502cdae565a8fcc45092cdd9ab29a731b9a570820157a72e8eb6c59767e9bc6883957443be2c7fb6a8857a88f0ef2c89

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
62KB

MD5
294b2f84a6ff072115ffe9947afe836b

SHA1
5a316c4ccb7617690622dbf939114f3777d0bb56

SHA256
c3f7e5d9aa41f92739b2f2482638cb93961aeea50e3272f9efb110bc135af2f9

SHA512
73809507c40d531e93f21dc3eabf9766ee67282d2de337a7e4560325c50a9905305d2473510935f831d3144b9b1e561969d55a8e9832cd956619a1de57e4dfc9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads