3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 04:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
Size

86KB
MD5

e8cdd9c8e1a660fd34a5ec9f62dbd1d0
SHA1

3794504edee467cf5f8077fe0b6c7fedc31db22e
SHA256

3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81
SHA512

4fd541a3cef523cd924c9119574be78d20ba54a30adbf4220b4901efeb73c4aa43d271ffd4ba8482ab18240de0756e004b9903f9f783ea86b9afbe9583e2b87a
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUE6b:69WpQE0zU9

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3447) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

Processes:

3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe

description	ioc	process
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\msdasqlr.dll.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\bin\unpack200.exe.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Asuncion.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msaddsr.dll.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\wab32.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Kolkata.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Bissau.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Puerto_Rico.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\7-zip32.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-iio.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\CompareComplete.mpeg3.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-io.xml.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\PresentationFramework.resources.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Atikokan.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\en-US\Hearts.exe.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\vlc.mo.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\settings.ini.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tabskb.dll.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\sqlxmlx.rll.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\TableTextService\es-ES\TableTextService.dll.mui.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\Media Renderer\DMR_120.jpg.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_down.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\bn.txt.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\CloseGet.mov.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msadds.dll.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\css\currency.css.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\40.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png.tmp	3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3648733909bc7144026d9521e061620523bb53f40e397c420c0dd1c3d0f3df81_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1108

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp
Filesize
86KB

MD5
2de78b21721d83b7b11ff94ecec2654b

SHA1
6d7fa8910087583307606909a8d4a78dadbffa0e

SHA256
3f037d2fd9d925ce57d110e7bd610001d4aaf6530622afa5ef9f95e4bbf453f6

SHA512
dfca79b18f71ed2c4def20f817864d5e1d57662af304a55dc6f97f2167aeb5aa248e1e0ba1dbfbb8f22e0881b6fac0966aa2ad7ccaec6d4ae9460c0b457d6441

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp
Filesize
95KB

MD5
f256a635561699277ea09fd12a02ab9d

SHA1
5852b059c899bf648d6ee3eca64a618d3d95e5c9

SHA256
dfd9a24a62bcb766aab763690a0201d116d67943b06c55c2a76c6ea86a6f6ffa

SHA512
a00f0f17e90be1ecebe7fef64e14838a9d416e9634fe246936187d615a1d832c1798116d17073487b9cc296012254478613b1aa44f1e29f747062c31e6399e1a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads