Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


10 October 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 01:51:39 01:51:39 1 ASM:Graph
 Armadillo| 0% lines=91 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 07:25:04 23:29:18 4 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
757c7019f5
NEW		 none [none] WinXP 40 of 43 02:05:18 02:05:18 1 none:none
 none|none none none
464f4b6177
NEW
61ab444924
NEW		 none [none]
none [none]		 Win2K-f 38 of 42 16:41:01 16:41:01 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
dc331fb791
NEW		 none [3] Win2K-f 3 of 37 09:23:09 09:23:09 1 none:none
 UPX| none trace
36bb7118f0
NEW
8b4a36f5a7
NEW		 none [none]
none [none]		 Win2K-f 19 of 42 00:50:12 00:50:12 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
377ae8c2fd
NEW		 none [none] Win2K-f 40 of 42 17:21:48 17:21:48 1 none:none
 none|none none none
cf346981b5
NEW		 2eb6c94f0a [0] WinXP 40 of 41 06:09:09 06:09:09 1 ASM:Graph
 PolyEnE| 100% lines=73 trace
14f47ffd1e
NEW		 90bf4b99ff [0] WinXP 40 of 41 05:31:17 05:31:17 1 ASM:Graph
 tElock| 96% lines=56
embedded dns		 trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:56:28 23:29:18 10 ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW
ba4a3d55fa
NEW		 none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 19 of 42 00:50:12 00:50:12 1 none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
8b41cb7a41
NEW		 ef18d720f3 [0] Win2K-f 3 of 41 19:30:21 19:30:21 1 ASM:Graph
 Armadillo| 0% lines=90 trace
66863cfb13
NEW
e8dfca0741
NEW		 fca240f318 [0]
20dfd2147c[0]
20dfd2147c[0]		 Win2K-f 38 of 40 12:33:28 12:33:28 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=125
embedded dns		 trace
trace
a47c6c159a
NEW		 none [none] WinXP 39 of 43 09:56:36 09:56:36 1 none:none
 none|none none none
986b59708d
NEW		 none [0] WinXP 29 of 29 07:11:30 12:43:29 2 none:none
 PolyEnE| 100% lines=57 trace
23018e5a28
NEW
41eec40656
NEW		 none [none]
none [none]		 Win2K-f 39 of 41 04:28:15 04:28:15 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
53aa804019
NEW
95ddd4a823
NEW		 29c6cdbf45 [0]
9e78315a6d[0]
9e78315a6d[0]		 Win2K-f 39 of 41 17:39:55 17:39:55 1 ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
377ae8c2fd
NEW
7cfdf42414
NEW		 none [none]
none [none]		 Win2K-f 40 of 42 17:21:48 17:21:48 1 none:none
none:none
 none|none
none|none		 none
none		 none
none
bbfa82b051
NEW		 none [none] WinXP 38 of 41 05:28:27 06:33:20 2 none:none
 none|none none none
23018e5a28
NEW		 none [none] Win2K-f 41 of 43 04:28:15 04:28:15 1 none:none
 none|none none none
ecb443d06e
NEW		 none [none] WinXP 39 of 41 20:37:49 20:37:49 1 none:none
 none|none none none
8b41cb7a41
NEW
97fef473b9
NEW		 ef18d720f3 [0]
ff4e7d6992[0]
ff4e7d6992[0]		 Win2K-f 33 of 33 19:30:21 19:30:21 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=90
lines=64
embedded dns		 trace
trace
a12cab51ef
NEW		 none [0] WinXP 29 of 29 11:53:12 11:53:12 1 none:none
 ASPack| 54% lines=281
embedded dns		 trace
d74b8d6c6b
NEW		 none [none] WinXP 40 of 42 07:02:51 13:06:20 3 none:none
 none|none none none
5818023061
NEW		 none [0] WinXP 32 of 32 00:26:40 00:26:40 1 none:none
 PolyEnE| 99% lines=68 trace
99b248336f
NEW		 c64bd1a776 [0] Win2K-f 34 of 36 03:53:41 03:53:41 1 ASM:Graph
 Armadillo| 0% lines=91 trace
0b951c2832
NEW		 5fe761661a [0] Win2K-f 32 of 36 19:22:40 19:22:40 1 ASM:Graph
 Armadillo| 0% lines=91 trace
7f60162c2c
NEW		 none [0] WinXP 25 of 25 20:11:04 20:11:04 1 none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
cb7a1c872d
NEW		 none [none] WinXP 42 of 43 13:16:34 13:16:34 1 none:none
 none|none none none
aad01847fa
NEW		 none [none] WinXP 42 of 43 05:17:17 05:17:17 1 none:none
 none|none none none
baa07a6a42
NEW		 none [none] Win2K-f 41 of 42 16:12:21 16:12:21 1 none:none
 none|none none none
741e3b03b3
NEW		 none [0] WinXP 31 of 32 06:56:28 06:56:28 1 none:none
 none|none 32% lines=61 trace
464f4b6177
NEW		 none [none] Win2K-f 39 of 43 16:41:01 16:41:01 1 none:none
 none|none none none
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW		 none [none]
none [none]
none [none]		 Win2K-f 34 of 39 00:50:12 00:50:12 1 none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
01c4a6b3eb
NEW		 dd524b0259 [0] WinXP 40 of 41 09:32:28 09:32:28 1 ASM:Graph
 PolyEnE| 100% lines=68 trace
1e12f5145a
NEW
f208493e65
NEW		 617af909de [0]
5100adb4f9[0]
5100adb4f9[0]		 Win2K-f 40 of 41 05:34:02 05:34:02 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
36bb7118f0
NEW
8b4a36f5a7
NEW
9b5bd50972
NEW
b4afa1df1d
NEW		 none [none]
none [none]
none [none]
none [none]		 Win2K-f 41 of 43 00:50:12 00:50:12 1 none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 01:37:54 10:24:56 2 ASM:Graph
 PolyEnE| 100% lines=68 trace
7d99b0e910
NEW		 none [0] WinXP 26 of 28 03:43:42 23:58:55 7 none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]
854c49d8c4[0]		 Win2K-f 39 of 41 01:51:39 01:51:39 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
ab9c4b5f21
NEW
d789c8d157
NEW		 5fe48b2dcc [0]
5f6572479f[0]
5f6572479f[0]		 Win2K-f 31 of 33 22:36:50 22:36:50 1 ASM:Graph
ASM:Graph
 Armadillo|
PolyEnE|		 95% lines=42
lines=113
embedded dns		 trace
trace
90d364b188
NEW		 none [none] WinXP 39 of 41 09:43:30 09:43:30 1 none:none
 none|none none none
66863cfb13
NEW		 fca240f318 [0] Win2K-f 38 of 40 12:33:28 12:33:28 1 ASM:Graph
 Armadillo| 0% lines=91 trace
14f47ffd1e
NEW
50437008d9
NEW		 90bf4b99ff [0]
c1b09ac5d7[0]
c1b09ac5d7[0]		 WinXP 5 of 41 05:31:17 05:31:17 1 ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=56
embedded dns
lines=90		 trace
trace
4ca3056804
NEW		 none [0] WinXP 1 of 33 17:19:50 17:19:50 1 none:none
 Armadillo| 0% lines=90 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 00:56:28 22:46:17 5 ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
02ff806b69
NEW		 none [none] WinXP 38 of 43 07:42:32 07:42:32 1 none:none
 none|none none none
36bb7118f0
NEW		 none [none] Win2K-f 25 of 41 00:50:12 00:50:12 1 none:none
 none|none none none
1e12f5145a
NEW		 617af909de [0] Win2K-f 39 of 41 05:34:02 05:34:02 1 ASM:Graph
 Armadillo| 0% lines=91 trace
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 05:07:47 11:37:23 2 ASM:Graph
 PolyEnE| 99% lines=68 trace
ab9c4b5f21
NEW		 5fe48b2dcc [0] Win2K-f 39 of 41 22:36:50 22:36:50 1 ASM:Graph
 Armadillo| 0% lines=42 trace
53aa804019
NEW		 29c6cdbf45 [0] Win2K-f 39 of 41 17:39:55 17:39:55 1 ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 28 of 41 01:27:38 01:27:38 1 none:none
 StarForce| none trace
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 05:09:08 06:45:34 2 ASM:Graph
 PolyEnE| 100% lines=73 trace
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 16:03:25 16:03:25 1 ASM:Graph
 PolyEnE| 100% lines=68 trace
0b951c2832
NEW
e4ed4df0f0
NEW		 5fe761661a [0]
de471fc380[0]
de471fc380[0]		 Win2K-f 34 of 36 19:22:40 19:22:40 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
2479e25b22
NEW		 none [none] WinXP 38 of 41 14:35:35 14:35:35 1 none:none
 none|none none none
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 05:01:03 05:01:03 1 ASM:Graph
 none|none 55% lines=59 trace
99b248336f
NEW
9d677c3f70
NEW		 c64bd1a776 [0]
77e75ff10f[0]
77e75ff10f[0]		 Win2K-f 29 of 32 03:53:41 03:53:41 1 ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 95% lines=91
lines=120
embedded dns		 trace
trace