3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455

Analysis

max time kernel
150s
max time network
125s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 03:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
Size

38KB
MD5

87469d0e6acd815140f6bc81171caf70
SHA1

b7114c1eba81feb94fdcfa37bd9933825d0e036f
SHA256

3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455
SHA512

f804dd8d82f73a21c72e48e2f5ef80988a85812038d1d1ffedc1d8fb0eed680545879cc8c3c6ee4838f8817641462b83b04500876f4e3f0728c92b880e065f89
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGUqoICOiJfoICOiJtk:W7BlpppARFbhbt7Y7FoICOiJfoICOiJS

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3102) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\v8_context_snapshot.bin.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_ja.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Data.Services.Design.resources.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Cayenne.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Office14\AUTHZAX.DLL.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Africa\Windhoek.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Araguaina.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Indian\Mauritius.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\InputPersonalization.exe.mui.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\vlm_export.html.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Currie.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+10.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Mahjong\MahjongMCE.png.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Efate.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\MST.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\ieproxy.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\prism-d3d.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\security\javafx.policy.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\fr-FR\OmdProject.dll.mui.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Ojinaga.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Amman.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Helsinki.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Dawson_Creek.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\JdbcOdbc.dll.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\java-rmi.exe.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\vlc.mo.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\logging.properties.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui.tmp	3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3386b0b3a2f566952cbe46027359eed46aabc89ecbbcc7b22d6d35c3d1114455_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2208

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp
Filesize
38KB

MD5
e4f887198a6f62a77e2871cbb632109a

SHA1
fe2b6b9621160b5c4924c035b11282df3cc8aad5

SHA256
bbe8c72912271d6c95b565d49a1e97307eab966e2c10444745f4b16d1d006c41

SHA512
879420c65814c131c406219c248eaa684e03a88ce07bc3a3dd4eef87a5bd27f65f211fa9adf4c4a854981fc27dd60dc3e75dc931914c0842daa83569d4b51e85

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
47KB

MD5
195a55376839d5ae34e855484d8ae7ef

SHA1
82aee2fb8bada74fb6ad2c5f2473d508c47cab91

SHA256
af9f5a876ee8784ec7eb4d56ef794b583f90dbb66803fa97e23cad1aa2e3fe37

SHA512
143189d4bcf8078f2a3ee72dd8b37cfbfca4d0dc4df9efc79e1a2f0027840c734d00610f82942aae87ef9578c143ad259d5ad179001d60b682c2fa040b13839c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads