3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b

Analysis

max time kernel
127s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 03:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
Size

39KB
MD5

81fc4ffe48a7f4e7850e06167097bfc0
SHA1

0ff313c7572c74fd22d5485b22e0dbe589f4583a
SHA256

3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b
SHA512

3505940909f844ada91c47d2c20ce3c6197816ed237632891c3d046de4b3a96a11df810f4ed72271e1e852880d101e058f7879a8dbb1e0bca9fcbab03c8ecb50
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN2TqXSg4vm3lXSg4vm38y5My5w:W7BlpppARFbhQ555w

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2846) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Broken_Hill.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\La_Rioja.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\it-IT\msaddsr.dll.mui.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\firefox.exe.sig.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\fi.txt.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Uzhgorod.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\HST.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationProvider.resources.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\EditSelect.asx.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationTypes.resources.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\FlickLearningWizard.exe.mui.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\Filters.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\glib-lite.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Macau.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\bckgRes.dll.mui.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Uninstall.exe.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\CST6.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+11.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IO.Log.Resources.dll.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\IpsMigrationPlugin.dll.mui.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\en-US.pak.tmp	3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3089beae04ba1b0e08729c026e31fdb083b4e13ca5cb84f230a0751b0dd9ec5b_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:3008

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp
Filesize
39KB

MD5
994fab88713cd22bff1b8d3918969c53

SHA1
022ba7ac47ee507aa3611b36f48524a9e04156a7

SHA256
bb7f67bc1aaa6a2a906b0fbb1abb7991f968b7b260de53b4a4aabcb871644db5

SHA512
5a77662bae32823793b5672822309eeadb2fbc0a395a0fd21742767e9026621aabc0e74190219ea107b52ebfc5871a6da1a104edc3cedf4051c24a2cdfd52b84

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
48KB

MD5
f8cbc01d413459325b4e8b55508bce9e

SHA1
98cf1efb0e74b4db9d2e3b53ad7880553381c207

SHA256
29fada5c022e37a9c1c44f7b4c7690f878e226e1b2b63f60fc4d063ebbca73a7

SHA512
1636db600f54a02e99b5007a2ef3d7f4b452ef7f59ab48536a8b8a408ff6c4bd4cbef9316daa2e17eea3202397e8b9c237a8b95acd4148df3ef132d1db5928ba

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads