3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 03:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
Size

81KB
MD5

26581b429795353c5d0ea4e653d3a540
SHA1

2620125013c42fbc661b0413330fb8f27635f96f
SHA256

3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d
SHA512

02e13ab65af1123981fbfca596c9ea1f80c5e7dfa98ef754b7bef78cbd61666a00d0d461498338624f74c08b0cbb9a995ddd8b6d50d97c546ce7035d228831c2
SSDEEP

768:W7BlpDpARFbhYQkQjjIXYvPXzWPXzK3733uF4V7en5c5HChCrmh1444REXBwzEXT:W7ZDpApYbWjIoPyPoLzV7c6Sh1XB

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2849) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Tegucigalpa.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Perth.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\platform.xml.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Inuvik.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\ShapeCollector.exe.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\mip.exe.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\ja-JP\msinfo32.exe.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Damascus.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\installation_telemetry.json.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InputPersonalization.exe.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-12.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Efate.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\zip.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\co.txt.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Cape_Verde.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.Printing.resources.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Luis.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Brunei.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yerevan.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\PopBlock.vsdx.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\npt.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunmscapi.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\java_crw_demo.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Pago_Pago.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.IO.Log.Resources.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationProvider.resources.dll.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Volgograd.tmp	3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3398f04df4a4b2438efa815f265d65908349c92f68d776168bef9e7eeb1b219d_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1072

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp
Filesize
81KB

MD5
d89b293a1f1d925aaf89be1f13c8b0d0

SHA1
a64f6070d9dd3df1a612e8a26684735f25a41c9c

SHA256
4e8c749aa5d13742c64b44fd7612fd34a2682084dfc8edab59972cc29c12ddfe

SHA512
4df4d396b25c15fbca5fbfa9ea85338da938fde4654b33abf65f28f85722dd2977d85b09dcff9b8806e732b8009777fc78866d14b35d9be4b834004e1017c226

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
90KB

MD5
daca6267c8dbdcb4f9538bff46ed6541

SHA1
f2d02babe306b1c5998ef87de511470f8b625adb

SHA256
a19bb57272326ff3761db570f1a3699044f64b50c7a2bda476ee14bbcec79c87

SHA512
3487bb387de4f0b4f8018145c062ea5f1dcfcdcabed66105a36e131a7f52014d3381d33b9c37da5e112f332850215f1aeadc8d0aed84be1f1a877480a091d706

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads