0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 23:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
Size

83KB
MD5

be88b472f52346a5039aac09264c8690
SHA1

a579a91378c7bee82b3c81a9b709371e48fb3fc3
SHA256

0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382
SHA512

f1dc657d93788d8ff5b4e0561421b50ac01c3816c06af60c851b3c6b65bce0529e057f1ac4dcaf29a2bc57de098094a4fa5a38d6afcc1d3072aaf128e8a0f7e5
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUp:69WpQE0zUp

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3666) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Canary.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\ShvlRes.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\TableTextServiceArray.txt.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\css\settings.css.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\jfxrt.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\perf_nt.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Beulah.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\npt.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Tell_City.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Antarctica\Macquarie.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\IPSEventLogMsg.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\net.properties.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgzm.exe.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Mail\it-IT\WinMail.exe.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\css\currency.css.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\micaut.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\de-DE\OmdProject.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IO.Log.Resources.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Services.Client.resources.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Chess\ChessMCE.lnk.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\desktop.ini.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Xml.Linq.Resources.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Defender\en-US\MpEvMsg.dll.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Spelling.api.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Taipei.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\it-IT\Hearts.exe.mui.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\es.txt.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_s.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_play.png.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Web.Entity.Resources.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\imjplm.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jli.dll.tmp	0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0adf353e57f1b3b4a991cc6602336b1aa455dfdb9734e94b4c8e06da6bdc0382_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

Filesize
84KB

MD5
392d44799828307fb07328d202737a49

SHA1
885ae0e0afb9ab1f602857f4db3f52b165cdf995

SHA256
d66b8b5f2fb1ad35f5e47ff8e50c16e23b8410eb2ce227d23a87a7403df6b206

SHA512
727fa6427ba685de5640cea5dbfe7bcc53d19a80b6915f01b51baace461e1841abf41639ae8fddf0901c847dd44993043b3a70556985d6d4aa6c972ab57fc5cb

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
93KB

MD5
6d087b1b99f349a31bca330ca373f7a8

SHA1
ff5ca1763410240e5ba63b1b40fb4821041f9ced

SHA256
fca7593cd461ac9c476a114d91f29f7c01ba238535c207db01189b4ad00ba1d4

SHA512
d60b1345e472282e5521c5931f11e94a24ee8d7ce91e3f2afebefff60522e9c4102ab121b12fe2031277b6b8aa38d45d94581468144a844030d629e197713a86

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads