Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


03 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1772d47c4c
NEW
298243013a
NEW
372b880eb1
NEW		 8bd43a2dce [0]
b8c969e769[0]
164314a8cc[0]		 Win2K-f 4 of 41 23:07:39 23:07:39 1 none none:none
none:none
none:none
 Stranik|
PEQuake|
Armadillo|		 none
none
none		 trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 32 04:10:05 23:13:12 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
c17655e7f6
NEW		 1b9278cf1b [0] WinXP 35 of 41 13:40:49 13:40:49 1 none none:none
 Armadillo| none trace
1772d47c4c
NEW
5448de5424
NEW
bea8cb1865
NEW
fac78fde16
NEW		 8bd43a2dce [0]
909699af1a[0]
154de51a66[0]
882896ab05[0]		 Win2K-f 35 of 36 04:40:47 04:40:47 1 none none:none
none:none
ASM:Graph
none:none
 Stranik|
tElock|
Armadillo|
tElock|		 none
none
lines=91
none		 trace
trace
trace
trace
067917e07b
NEW
d764c1dcb2
NEW		 dae35b319c [0]
3d2bc60c5d[0]		 WinXP 38 of 40 15:50:40 15:50:40 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:43:44 23:13:12 10 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
1772d47c4c
NEW
8a75955033
NEW
9276c8b36b
NEW		 8bd43a2dce [0]
2bf3e548b9[0]
none [0]		 WinXP 28 of 32 07:42:39 07:42:39 1 none none:none
ASM:Graph
ASM:Graph
 Stranik|
tElock|
Armadillo|		 47% none
lines=126
embedded dns
lines=81		 trace
trace
trace
1772d47c4c
NEW
298243013a
NEW
372b880eb1
NEW
50fea6b517
NEW		 8bd43a2dce [0]
b8c969e769[0]
164314a8cc[0]
9e7dff694f[0]		 Win2K-f 31 of 41 23:07:39 23:07:39 1 none none:none
none:none
none:none
none:none
 Stranik|
PEQuake|
Armadillo|
none|none		 none
none
none
none		 trace
trace
trace
trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 22:56:25 22:56:25 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
917c085aca
NEW		 none[3] Win2K-f 3 of 37 12:37:11 12:37:11 1 none none:none
 Armadillo| none trace
2721d2b151
NEW		 fde14d4abe [0] Win2K-f 37 of 40 09:51:49 09:51:49 1 none none:none
 Armadillo| none trace
34cbe7a593
NEW
3e83a2d4d7
NEW		 d38cb78003 [0]
b97fd63d29[0]		 Win2K-f 38 of 41 18:15:33 18:15:33 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 04:36:42 04:36:42 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
1772d47c4c
NEW
1e07abae19
NEW
298243013a
NEW
66863cfb13
NEW
e8dfca0741
NEW		 8bd43a2dce [0]
1136f27263[0]
b8c969e769[0]
fca240f318[0]
20dfd2147c[0]		 Win2K-f 38 of 40 12:37:36 12:37:36 1 none none:none
none:none
none:none
none:none
none:none
 Stranik|
StarForce|
PEQuake|
Armadillo|
tElock|		 none
none
none
none
none		 trace
trace
trace
trace
trace
c17655e7f6
NEW
fd8dc4a8c9
NEW		 1b9278cf1b [0]
83013248a6[0]		 WinXP 38 of 41 13:40:49 13:40:49 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
c05290bb06
NEW		 dddfe6a7fe [0] WinXP 0 of 0 09:51:48 09:51:48 1 none none:none
 PolyEnE| none trace
04ed4d2967
NEW		 e8aa304d1c [0] WinXP 35 of 36 14:44:47 14:44:47 1 none none:none
 PolyEnE| none trace
04ed4d2967
NEW
1772d47c4c
NEW
6583d08abf
NEW		 e8aa304d1c [0]
8bd43a2dce[0]
9e7dff694f[0]		 WinXP 30 of 39 14:44:47 14:44:47 1 none none:none
none:none
none:none
 PolyEnE|
Stranik|
none|none		 none
none
none		 trace
trace
trace
38ed850a0e
NEW		 46990f37cd [0] WinXP 34 of 38 13:55:43 13:55:43 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
1772d47c4c
NEW
298243013a
NEW
533d15b5ce
NEW		 8bd43a2dce [0]
b8c969e769[0]
c67adf46e2[0]		 Win2K-f 30 of 33 06:16:51 06:16:51 1 none none:none
none:none
ASM:Graph
 Stranik|
PEQuake|
tElock|		 96% none
none
lines=126
embedded dns		 trace
trace
trace
2721d2b151
NEW
b044168966
NEW		 fde14d4abe [0]
b02ac1f831[0]		 Win2K-f 38 of 40 09:51:49 09:51:49 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
067917e07b
NEW		 dae35b319c [0] WinXP 36 of 41 15:50:40 15:50:40 1 none none:none
 Armadillo| none trace
216ec67841
NEW		 none[3] Win2K-f 2 of 37 12:50:55 12:59:38 2 none none:none
 StarForce| none trace
1772d47c4c
NEW
298243013a
NEW
372b880eb1
NEW
50fea6b517
NEW
8a75955033
NEW		 8bd43a2dce [0]
b8c969e769[0]
164314a8cc[0]
9e7dff694f[0]
2bf3e548b9[0]		 WinXP
Win2K-f		 29 of 32 07:42:39 23:07:39 2 none none:none
none:none
none:none
none:none
ASM:Graph
 Stranik|
PEQuake|
Armadillo|
none|none
tElock|		 96% none
none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
trace
df5957180f
NEW		 a6e09a125b [0] WinXP 38 of 41 08:45:25 08:45:25 1 none none:none
 none|none none trace
1772d47c4c
NEW
1e07abae19
NEW		 8bd43a2dce [0]
1136f27263[0]		 Win2K-f 4 of 41 12:37:36 12:37:36 1 none none:none
none:none
 Stranik|
StarForce|		 none
none		 trace
trace
1772d47c4c
NEW
8a75955033
NEW
9276c8b36b
NEW
cb513b1bf5
NEW		 8bd43a2dce [0]
2bf3e548b9[0]
none [0]
9e7dff694f[0]		 WinXP 30 of 40 07:42:39 07:42:39 1 none none:none
ASM:Graph
ASM:Graph
none:none
 Stranik|
tElock|
Armadillo|
none|none		 none
lines=126
embedded dns
lines=81
none		 trace
trace
trace
trace
b8e39f84c2
NEW		 51276fb869 [0] WinXP 37 of 39 19:25:57 19:25:57 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 03:09:09 15:04:03 2 none none:none
 none|none 32% lines=61 trace
1772d47c4c
NEW		 8bd43a2dce [0] Win2K-f
WinXP		 18 of 41 04:40:47 23:07:39 7 none none:none
 Stranik| none trace
34cbe7a593
NEW		 d38cb78003 [0] Win2K-f 36 of 41 18:15:33 18:15:33 1 none none:none
 Armadillo| none trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 17:41:56 17:41:56 1 none ASM:Graph
 none|none 100% lines=61 trace
1772d47c4c
NEW
5448de5424
NEW
bea8cb1865
NEW		 8bd43a2dce [0]
909699af1a[0]
154de51a66[0]		 Win2K-f 32 of 36 04:40:47 04:40:47 1 none none:none
none:none
ASM:Graph
 Stranik|
tElock|
Armadillo|		 0% none
none
lines=91		 trace
trace
trace
1772d47c4c
NEW
298243013a
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 8bd43a2dce [0]
b8c969e769[0]
c67adf46e2[0]
none [0]		 Win2K-f 28 of 33 06:16:51 06:16:51 1 none none:none
none:none
ASM:Graph
none:none
 Stranik|
PEQuake|
tElock|
Armadillo|		 0% none
none
lines=126
embedded dns
lines=91		 trace
trace
trace
trace
1772d47c4c
NEW
298243013a
NEW
372b880eb1
NEW
50fea6b517
NEW
8a75955033
NEW
f1bb8174e3
NEW		 8bd43a2dce [0]
b8c969e769[0]
164314a8cc[0]
9e7dff694f[0]
2bf3e548b9[0]
ff7d442dd1[0]		 Win2K-f
WinXP		 24 of 40 06:16:51 23:07:39 4 none none:none
none:none
none:none
none:none
ASM:Graph
none:none
 Stranik|
PEQuake|
Armadillo|
none|none
tElock|
none|none		 none
none
none
none
lines=126
embedded dns
none		 trace
trace
trace
trace
trace
trace
02eb808a61
NEW		 3e26f13f19 [0] Win2K-f 38 of 41 02:46:57 02:46:57 1 none none:none
 none|none none trace
1772d47c4c
NEW
298243013a
NEW		 8bd43a2dce [0]
b8c969e769[0]		 Win2K-f 15 of 41 06:16:51 23:07:39 3 none none:none
none:none
 Stranik|
PEQuake|		 none
none		 trace
trace
ea23d4c1f9
NEW		 8f4c3a8da3 [0] Win2K-f 11 of 40 05:12:48 05:12:48 1 none none:none
 MingWin32| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 13:37:44 13:37:44 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
fcab6c9d17
NEW		 none[4] Win2K-f 38 of 40 04:51:25 04:51:25 1 none none:none
 Xtreme-Pr| none trace
1772d47c4c
NEW
5448de5424
NEW		 8bd43a2dce [0]
909699af1a[0]		 Win2K-f 8 of 41 04:40:47 04:55:33 2 none none:none
none:none
 Stranik|
tElock|		 none
none		 trace
trace
1772d47c4c
NEW
1e07abae19
NEW
298243013a
NEW
66863cfb13
NEW		 8bd43a2dce [0]
1136f27263[0]
b8c969e769[0]
fca240f318[0]		 Win2K-f 38 of 40 12:37:36 12:37:36 1 none none:none
none:none
none:none
none:none
 Stranik|
StarForce|
PEQuake|
Armadillo|		 none
none
none
none		 trace
trace
trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 19:34:54 19:34:54 1 none none:none
 none|none 33% lines=60 trace
10318ada62
NEW		 a5b9f355da [0] WinXP 37 of 41 02:16:02 02:16:02 1 none none:none
 none|none none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 00:43:44 16:21:03 5 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
7587773eea
NEW		 none[3] Win2K-f 7 of 37 19:16:50 19:16:50 1 none none:none
 StarForce| none trace
ce28648035
NEW		 126d2f4655 [0] Win2K-f 34 of 39 18:32:05 18:32:05 1 none ASM:Graph
 none|none 98% lines=546 trace
38ed850a0e
NEW
b9297745a1
NEW		 46990f37cd [0]
4294884d84[0]		 WinXP 35 of 38 13:55:43 13:55:43 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
1772d47c4c
NEW
298243013a
NEW
533d15b5ce
NEW
58c343a8d8
NEW
8228665f19
NEW		 8bd43a2dce [0]
b8c969e769[0]
c67adf46e2[0]
none [0]
9e7dff694f[0]		 Win2K-f 31 of 41 06:16:51 06:16:51 1 none none:none
none:none
ASM:Graph
none:none
none:none
 Stranik|
PEQuake|
tElock|
Armadillo|
none|none		 none
none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 00:23:48 00:23:48 1 none ASM:Graph
 none|none 55% lines=59 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 00:11:08 21:51:18 7 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace