33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1

Analysis

max time kernel
149s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 03:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
Size

47KB
MD5

cafade9267990330398db873aa9551b0
SHA1

151b4c13d4032647a378b526f04a6a5c64fc6dfb
SHA256

33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1
SHA512

46cd85999f2a97689e779fca9f3ddee6daaf81f223a01f287ca76a573e37856be35159934c0ff2cceecc0df6240b7a92de72cd965a26791a5803a709a24338b8
SSDEEP

768:W7BlpppARFbhbt7Y7FoICOiJfoICOiJS0Da0DWDgC0Da0DP:W7ZppApWmp0Da0DWEC0Da0DP

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (5199) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\7-Zip\Lang\hi.txt.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\CompareClose.mid.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\ReachFramework.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\System.Windows.Controls.Ribbon.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\Welcome.html.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_school.png.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-100.png.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Luna.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-140.png.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\MS.GRAPH.16.1033.hxn.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-memory-l1-1-0.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-pl.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXT.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART6.BDR.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\Microsoft.VisualBasic.Forms.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Design.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri Light-Constantia.xml.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-oob.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\IEEE2006OfficeOnline.xsl.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MEDIA\CAMERA.WAV.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\nslist.hxl.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\ConvertDisconnect.snd.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\lib\javafx.properties.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-ppd.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-pl.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\rsod\word.x-none.msi.16.x-none.tree.dat.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\PresentationCore.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\SmallLogoBeta.png.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre-1.8\bin\net.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-ul-oob.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL083.XML.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Diagnostics.Process.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\System.Windows.Forms.Design.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\System.Windows.Forms.Primitives.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\legal\jdk\unicode.md.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ul.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-pl.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\7z.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-ul-oob.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-pl.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Outlook.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Threading.Tasks.Extensions.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\Microsoft.VisualBasic.Forms.resources.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\legal\jdk\colorimaging.md.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\PPCORE.DLL.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Drawing.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-pl.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieTextModel.bin.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-oob.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ppd.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-phn.xrm-ms.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\mscss7wre_es.dub.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\DSMESSAGES.XML.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\lv.txt.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll.tmp	33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\33447bcb997ad922072629eda4736039e28037e7faea644632bce01a90bdcfe1_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:4316

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1337824034-2731376981-3755436523-1000\desktop.ini.tmp
Filesize
48KB

MD5
67af2f231b357983521876742db5b22f

SHA1
ed14ece575ab7c4b59dc0838843548055b08c9c8

SHA256
7603de095475af7abdb51fbdb574858e816bfcc033213dd41e49204ede251462

SHA512
dbf294c325dd9bb54f368eb1a34fb5b87deec2ddf4975c08d8561dff86cc54b0becf9ebdb94deb3ef0acd2ac9f15a7f144f683ab4fabc389358a687be0eee040

Download Submit
C:\Program Files\7-Zip\7-zip.dll.tmp
Filesize
146KB

MD5
8f6c0e70785b30c061727fe0bdfe5963

SHA1
6298c87003860bed0df71f3368b666b3671d478e

SHA256
b0333122fce80498de04951fbb6011c4ffd6b3fdcf64ee608eef1a238a984c2e

SHA512
ebf4ae22c0305d2c3e5bd8950672195ca9722c8bfc14f32a9162796870401e370b1a0ff605ddff5263239433879f39b64256df13b60ce5f857d604222df6b0d2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads