3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88

Analysis

max time kernel
110s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 03:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
Size

70KB
MD5

9b1786eb0e494d67b8ea45b94628fdc0
SHA1

143a159629a3fb01e6ca839baf66eb62bcb75181
SHA256

3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88
SHA512

d8154a516609165cabc05e30f3c3dc5b3b0e5878f2004bf0e2fbc3bea138af6f54de583fe8dba3bd82109f806b0945b248192313fcbd1c51fa31b8f9290dfb45
SSDEEP

384:yBs7Br5xjL8AgA71Fbhvhwfziz63rmreaL1bNawZWxoQD91F4AsiGZ:/7BlpQpARFbhWGUKBb4JxobNx

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2410) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\7-Zip\Lang\th.txt.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\net.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\CompareHide.doc.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\ja-JP\WMM2CLIP.dll.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\FlickLearningWizard.exe.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msadds.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-modules.xml.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogo.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\jp2ssv.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwresmlm.dat.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\FlickLearningWizard.exe.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\uk.pak.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\uz.txt.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeslm.dat.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\hprof.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\msinfo32.exe.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Apia.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\java_crw_demo.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tripoli.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipBand.dll.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado28.tlb.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_shmem.dll.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Reunion.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\WET.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\ffjcext.zip.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Noronha.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar.tmp	3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3383b6868b370e2fe6ce6a3eac79a090b8ca7d5ede02613e44d8ef5d706aeb88_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2416

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-481678230-3773327859-3495911762-1000\desktop.ini.tmp
Filesize
70KB

MD5
e6fed6fe8360e12ec132dcca1bf9f554

SHA1
59ef0ba3c85d315d5123457f6520d85d8574e61b

SHA256
eeff2115facfc92c64b3fc3884decd39ee5120fc4df91928e03c019c8b8b623b

SHA512
8235adcb69dfaa4f898b884db6620d9101ea8b3498c2d7bc4ead6edbcaa45972ce4224c2b85900fa8707128578176790b816dbc6d3402225722e2e54e927f7a6

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
79KB

MD5
826a21c5a236b4a122a22604d51d77d9

SHA1
c25d947ef59986192d3c5f7f6887bcb4c6551c0a

SHA256
3991944ff882800e008cd286bab2403b5fb9cd2706984e350473a61447536db7

SHA512
d7264de0790b78ccab97970c66ecae78f40027bbd6f9e22522ed6f7145f7a7e71ed1f790fd69aabaacd0c46eea543c2ab116b7c0f114decc608f2b6a27d24612

Download Submit
memory/2416-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2416-176-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads