4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 01:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
Size

51KB
MD5

8bb2533b49efa47fb74f4fbfa3e41630
SHA1

5d9f4c648f441aeff071734bccf5867f6f157bd0
SHA256

4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a
SHA512

54e987edfe16e81ae9076b1e8544d036dd11f8cf9d547da350fceda65a656c8aa4dd13166f2a4016fb84ee5697f1e99fb787662c207e8dd8e89d276e27313a68
SSDEEP

768:W7BlpNLpARFbhblkYlkuvIYFdGTDEXBwzEXBwO:W7ZNLpApCZuvIYXGT+

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3762) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Windows Sidebar\it-IT\sbdrop.dll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\modules\simplexml.luac.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\ja-JP\wmpnscfg.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.bmp.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\spacer_highlights.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\js\currency.js.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\updater.exe.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.properties.src.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Wake.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcor.dll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\es-ES\chkrzm.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\slideShow.html.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\25.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\InputPersonalization.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ashgabat.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\mng.txt.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Montevideo.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\sqlxmlx.rll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Miquelon.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Port_of_Spain.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\css\RSSFeeds.css.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\es-ES\Hearts.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationClient.resources.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\FlickLearningWizard.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jp2native.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Chess\en-US\Chess.exe.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\ShvlRes.dll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\Genko_1.jtp.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Catamarca.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Sofia.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml.tmp	4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4198938c4a7b790808d22b216eaca0576ab4567704b354d7cf63e060f07cd08a_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

Filesize
51KB

MD5
72adbed9b371fb6d0a20b57bd44c9083

SHA1
de93ed571d489fef2b39977c30927c6deb3b736e

SHA256
9578b92a2086ce351233de50b54a33acc63733fe28cd0dfdcf166556d0d43cfa

SHA512
bd4aa5982c341b1f3d9e5da54809c8c7c5371d32e5380102e6873fb346a2711142e7cb94b5dadb1213f68fbe0d4d480e61a3d45eedc62a50ea747e8d4b797d4d

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
60KB

MD5
a286acfe15b146ab8ff8e0321f4dac38

SHA1
39d42d705a1ccdcb0d88acf1751a444df3cd7010

SHA256
89b999daace5c067907ff0031ee8e434edabf34d7b7af11eb84b908ec20b0b1c

SHA512
5189994790ba04a3f5988e812a9efd20802bf7cf12794b3669f1acff4665190368a4e875bfb317f5ba154cb0f60496e9240781335a7a219368cc4ddfedfa9d75

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads