38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 05:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
Size

37KB
MD5

5e4cfc7659d0bd94d5751e0ad85db950
SHA1

9105e7e73aa2b98dd785855fba142468ff016152
SHA256

38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9
SHA512

d21dffaa6d1c2e24245a4d577d5fe623f5c4f8a6357afa0bed38a47823e727ed761e3defb5ece1399ad65c6c519dd3caf733efe3329b924213ee4b579a95fba5
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrq9q4+:W7BlpppARFbhknrl

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3859) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipBand.dll.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_left.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\WritePop.gif.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Havana.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\zh-tw.txt.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\de-DE\sqlxmlx.rll.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\include\jni.h.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Rio_Branco.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationClientsideProviders.resources.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\hxdsui.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\en-US\WMPSideShowGadget.exe.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_hover.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\js\highDpiImageSwap.js.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\DefaultID.pdf.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\css\weather.css.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\msinfo32.exe.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Honolulu.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\El_Salvador.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\Microsoft.Build.Engine.resources.dll.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\hu.txt.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png.tmp	38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\38d71330ccd1c2305dd8e89cb16d451fb77ed19fd884d416e4bcbe7adad9f1b9_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:2432

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp
Filesize
37KB

MD5
861e45dc7478ed14295c1acd88b6bb11

SHA1
1cf7dec4e2141467b7807947bd8101b37cfc3a63

SHA256
6032a3133b84271fda3b998b3d1227f09deea843c129358d285f203ab0e9a0d9

SHA512
d3f936bbe1ecd911918ddb04651d58ecbf27334b92bb8dcf36354087bdce1f0eb320a11ce388662479b8555e1146d67e0eb6e4a7629392ba91eefe0b40f52aec

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
46KB

MD5
c68bdb47a1aee4549a60230d4f51f9a9

SHA1
132f18807e71d6229cdbbe19d5d874a3001f7f0d

SHA256
a8988b630eaa42f49bb49dbbee5f2ca884dd785ce287dc3c3c27bdf8cbe2b67e

SHA512
2d8ffbd56eaaacaf04306a2123cb00f2ac38b4130e62e674482d0d77b3009b01c065889c8070e05daa1fa49463f1b4fff0216bbff8f1d84e2e96bdd653c11d1f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads