Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


25 September 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
9ce56f9f19
NEW		 261c9da48f [0] Win2K-f 39 of 41 01:01:00 01:01:00 1 none:none
 StarForce| none trace
2f738d197c
NEW		 ad852b9102 [0] Win2K-f 39 of 41 14:17:07 14:17:07 1 none:none
 none|none none trace
ccf304416b
NEW		 9b5a631087 [0] WinXP 34 of 41 22:42:05 22:42:05 1 none:none
 none|none none trace
d3db2a09c9
NEW		 a1c6976e2e [0] Win2K-f 39 of 41 13:39:46 13:39:46 1 none:none
 Armadillo| none trace
c3de5970ac
NEW		 d49804c883 [0] Win2K-f 33 of 41 11:31:07 11:31:07 1 none:none
 none|none none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 05:04:08 05:04:08 1 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
07fabc79ef
NEW
53bfe15e91
NEW		 none[0]
1473091351[0]
1473091351[0]		 Win2K-f
WinXP		 33 of 33 00:14:42 23:12:47 8 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=75
embedded dns		 trace
trace
f38a8f15d5
NEW		 e19283ab5b [0] WinXP 39 of 41 01:30:07 01:30:07 1 none:none
 Armadillo| none trace
93dcd8587f
NEW		 e7124c9b61 [0] Win2K-f 38 of 40 00:14:57 10:22:53 2 none:none
 Stranik| none trace
fb1247468a
NEW		 7df8c478db [0] Win2K-f 39 of 41 01:09:22 01:09:22 1 none:none
 Armadillo| none trace
47d3548e36
NEW
d8722af110
NEW		 ab13346633 [0]
ab30a55931[0]
ab30a55931[0]		 WinXP 36 of 40 12:06:51 12:06:51 1 none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
d51095c06b
NEW		 3efbcd2f0c [0] Win2K-f 39 of 41 20:12:32 20:12:32 1 none:none
 none|none none trace
0f00f88a4c
NEW		 a4764f38a7 [0] WinXP 40 of 41 02:11:55 02:11:55 1 none:none
 PolyEnE| none trace
6f495c833b
NEW		 ffd498f313 [0] WinXP 39 of 41 14:19:09 14:19:09 1 none:none
 none|none none trace
9df38b39b5
NEW		 41dad39abd [0] Win2K-f 39 of 41 12:47:43 12:47:43 1 none:none
 Armadillo| none trace
4ceccaec21
NEW		 6ffedb8be7 [0] WinXP 40 of 41 13:19:07 13:19:07 1 none:none
 PolyEnE| none trace
aab88c1c51
NEW		 cf93cc0212 [0] Win2K-f
WinXP		 35 of 41 17:15:42 20:58:34 2 none:none
 none|none none trace
27a4701383
NEW		 74b7948215 [0] WinXP 39 of 41 01:37:45 01:37:45 1 none:none
 Armadillo| none trace
3ed16ae12d
NEW		 none [0] WinXP 3 of 33 07:54:46 07:54:46 1 ASM:Graph
 Armadillo| 47% lines=81 trace
f57c15d770
NEW		 7583fe4738 [0] WinXP 29 of 41 17:38:10 17:38:10 1 none:none
 Armadillo| none trace
18dfbbc85b
NEW
5d721a4dee
NEW
a09a3cb82f
NEW
c7830331fc
NEW		 4f6fcecea3 [0]
6afc8cafab[0]
c7fb6cde5f[0]
7953649664[0]
7953649664[0]		 Win2K-f 7 of 41 16:59:39 16:59:39 1 none:none
none:none
none:none
none:none
 UPX|
UPX|
tElock|
tElock|		 none
none
none
none		 trace
trace
trace
trace
f6216c857c
NEW		 9546f422db [0] Win2K-f 37 of 41 10:23:02 10:23:02 1 none:none
 none|none none trace
741e3b03b3
NEW		 none [0] WinXP 31 of 32 07:08:20 19:40:57 2 none:none
 none|none 32% lines=61 trace
18dfbbc85b
NEW
5d721a4dee
NEW
a09a3cb82f
NEW		 4f6fcecea3 [0]
6afc8cafab[0]
c7fb6cde5f[0]
c7fb6cde5f[0]		 Win2K-f 35 of 41 16:59:39 16:59:39 1 none:none
none:none
none:none
 UPX|
UPX|
tElock|		 none
none
none		 trace
trace
trace
4cbbc9cdc3
NEW		 9b1bced683 [0] WinXP 34 of 39 22:34:35 22:34:35 1 none:none
 Armadillo| none trace
abbb0e3bad
NEW		 e7124c9b61 [0] WinXP 38 of 41 01:04:35 01:04:35 1 none:none
 Stranik| none trace
17028f1eda
NEW		 none [3] WinXP 31 of 32 15:40:55 15:40:55 1 none:none
 tElock| none trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]
854c49d8c4[0]		 WinXP 39 of 41 18:04:54 18:04:54 1 none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
4cbbc9cdc3
NEW
86d4950962
NEW		 9b1bced683 [0]
c78e30261c[0]
c78e30261c[0]		 WinXP 35 of 39 22:34:35 22:34:35 1 none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 07:32:00 12:13:46 3 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
fcab6c9d17
NEW		 none [4] WinXP 38 of 40 03:38:48 03:38:48 1 none:none
 Xtreme-Pr| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 00:14:42 20:18:58 3 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
de37f2fc47
NEW		 bac4cc6eec [0] WinXP
Win2K-f		 33 of 41 00:30:01 14:18:26 6 none:none
 Armadillo| none trace
2ee45e8ca3
NEW		 13948a04cd [0] Win2K-f 38 of 41 13:05:07 13:05:07 1 none:none
 none|none none trace
a4a5d13de5
NEW		 79e07808d1 [0] Win2K-f 40 of 41 03:59:43 03:59:43 1 none:none
 Stranik| none trace
ab31b15184
NEW		 9b0ca71492 [0] Win2K-f 37 of 41 18:52:31 18:52:31 1 none:none
 none|none none trace
ad01e4744b
NEW		 9513e08835 [0] Win2K-f 39 of 41 03:25:00 03:25:00 1 none:none
 Armadillo| none trace
3cdb79c3bd
NEW		 39a2313285 [0] WinXP 38 of 41 16:37:29 16:37:29 1 none:none
 none|none none trace
c9f65ef422
NEW		 7c95df9a67 [0] Win2K-f 37 of 41 18:50:38 18:50:38 1 none:none
 none|none none trace
10759405e0
NEW		 292d343248 [0] WinXP 38 of 41 18:04:54 18:04:54 1 none:none
 Armadillo| none trace
a48acac5f1
NEW		 1d29e407ed [0] WinXP 39 of 41 12:18:53 12:18:53 1 none:none
 Armadillo| none trace
6ef8b58d3a
NEW		 829216a8e8 [0] WinXP 39 of 41 12:57:37 12:57:37 1 none:none
 Armadillo| none trace
67a66839f7
NEW		 7b1fc808a3 [0] Win2K-f
WinXP		 37 of 41 10:10:37 22:51:07 12 none:none
 none|none none trace
07fabc79ef
NEW		 none [0] Win2K-f 0 of 32 23:12:47 23:12:47 1 ASM:Graph
 Armadillo| 47% lines=81 trace
6eca023085
NEW		 6dbddbd567 [0] WinXP 39 of 41 00:44:01 00:44:01 1 none:none
 Armadillo| none trace
f4b8e2c149
NEW		 42a8943248 [0] Win2K-f 34 of 39 17:53:19 17:53:19 1 none:none
 none|none none trace
6d82d4f4e6
NEW		 74e97a707d [0] WinXP 34 of 41 10:53:42 10:53:42 1 none:none
 Armadillo| none trace
b3e6830587
NEW		 b077d5e361 [0] Win2K-f 40 of 41 15:20:23 15:20:23 1 none:none
 none|none none trace
7c153bb816
NEW		 3e38bd1d25 [0] Win2K-f 40 of 41 02:41:18 02:41:18 1 none:none
 Stranik| none trace
00f78fac3a
NEW		 4b95c7088a [0] WinXP 40 of 41 04:10:36 04:10:36 1 none:none
 PENinja S| none trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 14:49:31 14:49:31 1 none:none
 PolyEnE| none trace
2c31e3c966
NEW		 dca1fa0c85 [0] WinXP 40 of 41 06:09:32 06:09:32 1 none:none
 PolyEnE| none trace
18dfbbc85b
NEW
5d721a4dee
NEW		 4f6fcecea3 [0]
6afc8cafab[0]
6afc8cafab[0]		 Win2K-f 23 of 41 16:59:39 16:59:39 1 none:none
none:none
 UPX|
UPX|		 none
none		 trace
trace
1a55e9201c
NEW
39336e51eb
NEW
524bc0f75c
NEW		 224d2a144d [0]
3f5ab71d39[0]
d3e9510bb3[0]
d3e9510bb3[0]		 Win2K-f 32 of 38 09:23:48 09:23:48 1 none:none
none:none
none:none
 PolyEnE|
Neolite|
PENinja S|		 none
none
none		 trace
trace
trace
e8fb3d3f27
NEW		 6a50a661d6 [0] WinXP 39 of 41 14:57:05 14:57:05 1 none:none
 none|none none trace
7f60162c2c
NEW		 none [0] WinXP 25 of 25 04:48:04 04:48:04 1 none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
08011872f2
NEW		 41edb4b960 [0] WinXP 36 of 41 03:05:58 03:05:58 1 none:none
 Armadillo| none trace
d319897103
NEW		 602d2a14de [0] Win2K-f 39 of 41 13:39:09 13:39:09 1 none:none
 none|none none trace
cc04277ea8
NEW		 bac4cc6eec [0] WinXP 36 of 41 11:45:10 11:45:10 1 none:none
 Armadillo| none trace
ff0524f0f7
NEW		 dfa3c19d32 [0] Win2K-f 39 of 41 16:47:11 16:47:11 1 none:none
 none|none none trace
8b78975d2e
NEW		 8b58345106 [0] WinXP 38 of 41 19:30:30 19:30:30 1 none:none
 none|none none trace
9712801d52
NEW		 eef52d5849 [0] Win2K-f 39 of 41 15:54:22 15:54:22 1 none:none
 none|none none trace
1a55e9201c
NEW		 224d2a144d [0] Win2K-f 41 of 41 09:23:48 09:23:48 1 none:none
 PolyEnE| none trace
18dfbbc85b
NEW		 4f6fcecea3 [0] Win2K-f 7 of 41 16:59:39 16:59:39 1 none:none
 UPX| none trace
2f64188858
NEW		 274adb9564 [0] WinXP 39 of 41 11:12:21 11:12:21 1 none:none
 none|none none trace
7fad2f03e7
NEW		 b8d05e02eb [0] Win2K-f 38 of 41 00:44:45 00:44:45 1 none:none
 Armadillo| none trace
1a55e9201c
NEW
39336e51eb
NEW		 224d2a144d [0]
3f5ab71d39[0]
3f5ab71d39[0]		 Win2K-f 29 of 41 09:23:48 09:23:48 1 none:none
none:none
 PolyEnE|
Neolite|		 none
none		 trace
trace
0de139e319
NEW		 4bb217a841 [0] Win2K-f 37 of 41 10:01:57 10:01:57 1 none:none
 none|none none trace
47d3548e36
NEW		 ab13346633 [0] WinXP 37 of 41 12:06:51 12:06:51 1 none:none
 Armadillo| none trace
3df9273f90
NEW		 2cf71b3383 [0] WinXP 38 of 41 02:20:03 02:20:03 1 none:none
 StarForce| none trace
3ed16ae12d
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]
1bfd34056c[0]		 WinXP 33 of 33 07:54:46 07:54:46 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
459d2bddeb
NEW		 10fac04dd2 [0] WinXP 40 of 41 04:10:18 04:10:18 1 none:none
 none|none none trace
6a82948d13
NEW		 52173cbdf0 [0] Win2K-f 38 of 41 14:46:09 14:46:09 1 none:none
 none|none none trace
660e56b04a
NEW		 64d4770123 [0] WinXP 39 of 41 19:22:42 19:22:42 1 none:none
 none|none none trace
bfbd0e65c4
NEW		 69821b8c4d [0] Win2K-f 38 of 41 17:56:02 17:56:02 1 none:none
 none|none none trace
bd2ec6b8c1
NEW		 17c0af6497 [0] WinXP 39 of 41 15:31:53 15:31:53 1 none:none
 none|none none trace
7bdda5ea98
NEW		 123bc54df7 [0] WinXP 39 of 41 17:47:14 17:47:14 1 none:none
 none|none none trace
9f5b49bb41
NEW		 e7124c9b61 [0] Win2K-f 38 of 40 02:06:53 02:06:53 1 none:none
 Stranik| none trace
44364e5fd9
NEW		 4743d8cdba [0] WinXP 39 of 41 01:53:26 01:53:26 1 none:none
 Armadillo| none trace
7f876aa59f
NEW		 beb0ec87db [0] WinXP 38 of 41 13:16:29 13:16:29 1 none:none
 Armadillo| none trace
a639a866cf
NEW		 c7bf122964 [0] WinXP 38 of 41 05:28:04 05:28:04 1 none:none
 PolyEnE| none trace
ed96c03ca8
NEW		 c0028e9e98 [0] WinXP 39 of 41 23:38:41 23:44:47 2 none:none
 PolyEnE| none trace
74d54b3e54
NEW		 5920ae3ab5 [0] Win2K-f 39 of 41 14:50:21 14:50:21 1 none:none
 none|none none trace
18dfbbc85b
NEW
5d721a4dee
NEW
a09a3cb82f
NEW
c7830331fc
NEW
deca0a71d7
NEW		 4f6fcecea3 [0]
6afc8cafab[0]
c7fb6cde5f[0]
7953649664[0]
6e7c1a39e4[0]
6e7c1a39e4[0]		 Win2K-f 15 of 41 16:59:39 16:59:39 1 none:none
none:none
none:none
none:none
none:none
 UPX|
UPX|
tElock|
tElock|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
5ec9484592
NEW		 0978210109 [0] Win2K-f 40 of 41 04:41:53 04:41:53 1 none:none
 Stranik| none trace
e3e1b1d23a
NEW		 79454c708c [0] WinXP 40 of 41 15:17:41 15:17:41 1 none:none
 none|none none trace
10ffd3dfd1
NEW		 f64fdf148f [0] WinXP 36 of 36 03:16:54 03:16:54 1 none:none
 PolyEnE| none trace