Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


27 July 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
47d76e8dce
NEW		 457779e597 [0] WinXP 25 of 41 14:17:33 14:17:33 1 none none:none
 Neolite| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 02:22:27 06:56:45 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
176f4e0237
NEW
852eec7620
NEW		 971b66b4c6 [0]
af9f5e5446[0]		 WinXP 0 of 0 18:25:00 18:25:00 1 none none:none
none:none
 none|none
none|none		 none
none		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 02:22:27 22:48:59 9 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
d69be65220
NEW		 16d65fd6e9 [0] Win2K-f 0 of 0 03:01:29 03:01:29 1 none none:none
 Armadillo| none trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 17:35:12 17:35:12 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
382bc4ac64
NEW		 none[3] Win2K-f 0 of 0 20:15:35 20:15:35 1 none none:none
 none|none none trace
8a0ba42477
NEW		 none[4] WinXP 0 of 0 23:34:55 23:34:55 1 none none:none
 PolyEnE| none trace
e321efdb3f
NEW		 97101a3473 [0] WinXP 26 of 28 23:33:36 23:33:36 1 none none:none
 PolyEnE| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 16:26:52 16:55:17 2 none none:none
 PolyEnE| none trace
7623c942a9
NEW		 1e7e1e0e5d [0] WinXP 29 of 29 08:06:14 08:06:14 1 none none:none
 tElock| none trace
6b3beaea1a
NEW		 154f174df6 [0] WinXP 35 of 36 15:12:39 15:12:39 1 none none:none
 PolyEnE| none trace
533d15b5ce
NEW		 c67adf46e2 [0] WinXP 30 of 33 06:46:20 06:46:20 1 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 12:27:28 12:27:28 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
0b951c2832
NEW		 5fe761661a [0] Win2K-f 32 of 36 14:42:57 14:42:57 1 none none:none
 Armadillo| none trace
03f912899b
NEW		 none[0] WinXP 32 of 32 11:49:12 11:49:12 1 none none:none
 none|none 32% lines=64 trace
47d76e8dce
NEW
524bc0f75c
NEW		 457779e597 [0]
d3e9510bb3[0]		 WinXP 32 of 38 14:17:33 14:17:33 1 none none:none
none:none
 Neolite|
PENinja S|		 none
none		 trace
trace
4c3df24b32
NEW		 none[0] WinXP 0 of 33 03:46:51 03:46:51 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
dba298277c
NEW		 e499a208a6 [0] WinXP 0 of 0 10:18:35 10:18:35 1 none none:none
 StarForce| none trace
3ed16ae12d
NEW		 none[0] WinXP 3 of 33 09:36:10 09:36:10 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 13:47:35 13:47:35 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
e70e195b77
NEW		 3d277747d3 [0] WinXP 0 of 0 09:12:46 09:12:46 1 none none:none
 PolyEnE| none trace
d61760f6a1
NEW		 22542b9b5e [0] WinXP 33 of 36 12:49:06 12:49:06 1 none none:none
 PolyEnE| none trace
176f4e0237
NEW		 971b66b4c6 [0] WinXP 19 of 41 18:25:00 18:25:00 1 none none:none
 none|none none trace
0f8abb24d9
NEW		 none[3] WinXP 0 of 0 17:13:59 17:13:59 1 none none:none
 none|none none trace
533d15b5ce
NEW
58c343a8d8
NEW		 c67adf46e2 [0]
none [0]		 WinXP 28 of 33 06:46:20 06:46:20 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=126
embedded dns
lines=91		 trace
trace
47d76e8dce
NEW
524bc0f75c
NEW
a0a15f5ebf
NEW		 457779e597 [0]
d3e9510bb3[0]
c506c7cc86[0]		 WinXP 37 of 40 14:17:33 14:17:33 1 none none:none
none:none
none:none
 Neolite|
PENinja S|
Mew|		 none
none
none		 trace
trace
trace
32426281df
NEW		 f932394e48 [0] Win2K-f 0 of 0 18:21:58 18:21:58 1 none none:none
 Armadillo| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 03:48:43 03:48:43 1 none none:none
 PolyEnE| 99% lines=68 trace
3ed16ae12d
NEW
79c01ec060
NEW		 none[0]
1bfd34056c[0]		 WinXP 33 of 33 09:36:10 09:36:10 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=81
lines=64
embedded dns		 trace
trace
119ec42aa0
NEW		 fd3c61c261 [0] WinXP 40 of 41 10:56:25 10:56:25 1 none none:none
 PolyEnE| none trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 14:40:02 15:16:05 2 none none:none
 tElock| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 22:48:45 22:48:45 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 05:13:44 05:13:44 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 11:23:38 22:48:59 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
4530fc0b7f
NEW		 1ce549df2a [0] WinXP 0 of 0 07:29:29 07:29:29 1 none none:none
 none|none none trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f
WinXP		 28 of 41 20:31:41 23:17:15 3 none none:none
 StarForce| none trace
aafd96fe57
NEW		 9d4029abac [0] Win2K-f 37 of 41 03:46:47 03:46:47 1 none none:none
 StarForce| none trace
0b951c2832
NEW
e4ed4df0f0
NEW		 5fe761661a [0]
de471fc380[0]		 Win2K-f 34 of 36 14:42:57 14:42:57 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 16:57:54 20:35:04 2 none ASM:Graph
 none|none 55% lines=59 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 21:21:27 21:30:08 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace