Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

28 September 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

4c3df24b32
NEW none [0] Win2K-f 0 of 33 14:02:11 14:02:11 1 ASM:Graph
Armadillo| 47% lines=81 trace

428d526489
NEW
5d721a4dee
NEW
dab4da4e21
NEW none[4]
6afc8cafab[0]
e63b813015[0]
e63b813015[0] WinXP 37 of 39 05:21:08 05:21:08 1 none:none
none:none
ASM:Graph
PEQuake|
UPX|
PolyEnE| 100% none
none
lines=134 trace
trace
trace

53bfe15e91
NEW
73f1082158
NEW 1473091351 [0]
none [0] Win2K-f
WinXP 0 of 32 00:41:28 23:17:40 7 ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

824d6a706e
NEW a66fd13bcb [0] WinXP 40 of 40 22:03:46 22:03:46 1 none:none
PolyEnE| none trace

53bfe15e91
NEW 1473091351 [0] Win2K-f
WinXP 33 of 33 00:41:28 23:17:40 13 ASM:Graph
tElock| 96% lines=75
embedded dns trace

4baf02c545
NEW b5ff98d951 [0] Win2K-f 39 of 41 03:38:15 03:38:15 1 none:none
none|none none trace

5e3a9c2d9d
NEW dbc48b815a [0] Win2K-f 40 of 41 16:21:27 16:21:27 1 none:none
tElock| none trace

df17a625ee
NEW none [0] WinXP 29 of 29 10:20:33 10:20:33 1 none:none
ASPack| 72% lines=298
embedded dns trace

533d15b5ce
NEW
58c343a8d8
NEW c67adf46e2 [0]
none [0] Win2K-f 28 of 33 06:17:52 07:17:09 2 ASM:Graph
none:none
tElock|
Armadillo| 0% lines=126
embedded dns
lines=91 trace
trace

428d526489
NEW none [4] WinXP
Win2K-f 2 of 41 05:21:08 06:31:31 3 none:none
PEQuake| none trace

47d3548e36
NEW ab13346633 [0] Win2K-f 37 of 41 19:02:54 19:02:54 1 none:none
Armadillo| none trace

5e3a9c2d9d
NEW
630308d06b
NEW dbc48b815a [0]
847d302e37[0]
847d302e37[0] Win2K-f 39 of 41 16:21:27 16:21:27 1 none:none
none:none
tElock|
Armadillo| none
none trace
trace

09245a76fe
NEW 4767a61119 [0] WinXP 40 of 41 15:30:05 15:30:05 1 none:none
none|none none trace

53bfe15e91
NEW
b7082104e4
NEW 1473091351 [0]
c5b49e7b82[0]
c5b49e7b82[0] Win2K-f 8 of 33 06:07:49 06:07:49 1 ASM:Graph
ASM:Graph
tElock|
tElock| 100% lines=75
embedded dns
lines=41 trace
trace

4d4b114a18
NEW 2414a15ebd [0] WinXP 40 of 41 19:36:38 19:36:38 1 none:none
PolyEnE| none trace

1bc51bf964
NEW
e33c8e30b9
NEW 4ab7eeaf6c [0]
95caa6a57d[0]
95caa6a57d[0] Win2K-f 39 of 41 14:14:30 14:14:30 1 none:none
none:none
tElock|
Armadillo| none
none trace
trace

53bfe15e91
NEW
57ce4acac2
NEW 1473091351 [0]
none [0] Win2K-f
WinXP 0 of 33 09:17:58 22:23:44 3 ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

d6df3972a0
NEW none [0] WinXP 29 of 29 14:28:28 14:28:28 1 ASM:Graph
PolyEnE| 100% lines=65 trace

b502f83a7c
NEW 28f5be93b0 [0] WinXP 32 of 32 05:48:21 20:46:21 2 none:none
PolyEnE| none trace

47d3548e36
NEW
d8722af110
NEW ab13346633 [0]
ab30a55931[0]
ab30a55931[0] Win2K-f 36 of 40 19:02:54 19:02:54 1 none:none
none:none
Armadillo|
tElock| none
none trace
trace

1bc51bf964
NEW 4ab7eeaf6c [0] Win2K-f 40 of 41 14:14:30 14:14:30 1 none:none
tElock| none trace

53bfe15e91
NEW
a08f3b74a4
NEW 1473091351 [0]
none [0] Win2K-f 0 of 33 04:08:44 04:08:44 1 ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

d1f309e51c
NEW c903a7971c [0] WinXP 39 of 41 03:18:13 03:18:13 1 none:none
Armadillo| none trace

533d15b5ce
NEW c67adf46e2 [0] Win2K-f 30 of 33 06:17:52 07:17:09 2 ASM:Graph
tElock| 96% lines=126
embedded dns trace

fc21e133bb
NEW 6731b98370 [0] WinXP 40 of 41 02:11:35 02:11:35 1 none:none
PolyEnE| none trace

428d526489
NEW
5d721a4dee
NEW
f57343412f
NEW none[4]
6afc8cafab[0]
6afc8cafab[0]
none [4] WinXP
Win2K-f 11 of 41 05:21:08 06:31:31 2 none:none
none:none
none:none
PEQuake|
UPX|
StarForce| none
none
none trace
trace
trace

5865b09945
NEW 4d99f4784a [0] WinXP 36 of 38 20:47:17 20:47:17 1 none:none
PolyEnE| none trace

5285741560
NEW 60590b8b67 [0] WinXP 37 of 40 17:27:10 22:49:50 3 ASM:Graph
none|none 55% lines=59 trace

428d526489
NEW
5d721a4dee
NEW none[4]
6afc8cafab[0]
6afc8cafab[0] WinXP
Win2K-f 23 of 41 05:21:08 06:31:31 2 none:none
none:none
PEQuake|
UPX| none
none trace
trace