b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 18:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
Size

67KB
MD5

1354e1108dfea67af59af65f4d7fd020
SHA1

0e313a10bfba310fe31539bcaf0e9b8dc0d03076
SHA256

b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515
SHA512

758a14fd5dfee6a8bf0c85017ee70d3c12af5b94b00af6579d643feeb46f77861ae9fc7cf9d273076410b5f93c0411a810d8f655cb3df356e61caadddfa30dab
SSDEEP

768:W7BlpNLpARFbhblkYlkuvIYFWcDYcDlvcYNnVvcYNnnUa:W7ZNLpApCZuvIYYoYoN7n97nR

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3628) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.Linq.Resources.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IO.Log.Resources.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\bckgzm.exe.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Defender\fr-FR\MsMpRes.dll.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\TableTextServiceAmharic.txt.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Entity.Design.Resources.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\flyout.html.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\js\weather.js.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Campo_Grande.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\sd\jamendo.luac.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\fr-FR\sbdrop.dll.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\invalid32x32.gif.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\uninstall\helper.exe.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Karachi.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.Speech.resources.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\vlc.mo.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ur.pak.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgePackages.h.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Fortaleza.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\js\localizedStrings.js.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\Azores.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\Chkr.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ACE.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-7.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\installer.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Services.Client.resources.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\cpu.js.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STC.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_elf.dll.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\PST8.tmp	b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\b6d3c50dd81121e4ed9141ad16abd26528f221cc36e297d5956b35391f10a515_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2297530677-1229052932-2803917579-1000\desktop.ini.tmp

Filesize
67KB

MD5
e8e7034144b8f48ed397b1c1df30d9ef

SHA1
d9569c811bd87b7582f2c277e8ddae3dae52c0c0

SHA256
e385ce3579a808f307ef7fb2866833c3d6f4214fb4043ff31b708f3d0d1cc439

SHA512
392d4865a60ddeacb7c01ff4841bee37c0d748ab6e0d55dfd4062ee918e2e4f32443fac992dc98fdac5447f821c6527c1fefec28f9a3aa61cdd540b6c48fc3f2

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
76KB

MD5
5e4858fd6235422bcabbb6b45e7473ff

SHA1
2ef7647924238aae9082f2a6217a2e2474fd8eed

SHA256
e0c4861757c7b8ce020f19d81560f6fa5c145c6c027493bd963fd5e67c054b3c

SHA512
117c7470a2f408df7985ae36af93706005074d723d44a6b17bb9a9e6bcb19fc7a16d41925a3b351dc653279810aa9345745728ea0fafe1ee80216448f511f288

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads