Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 September 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
0b24e62ad9
NEW		 3e473e0302 [0] Win2K-f 38 of 41 22:17:58 22:17:58 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 14:51:27 20:27:16 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
ecdd8be2f9
NEW		 04c2f317fa [0] WinXP 41 of 41 21:02:12 21:02:12 1 none none:none
 Stranik| none trace
38e8f258e7
NEW
533d15b5ce
NEW
58c343a8d8
NEW
95ca496b37
NEW		 871a2e904e [0]
c67adf46e2[0]
none [0]
9c39a10179[0]		 Win2K-f 19 of 41 11:32:43 11:32:43 1 none none:none
ASM:Graph
none:none
none:none
 none|none
tElock|
Armadillo|
none|none		 none
lines=126
embedded dns
lines=91
none		 trace
trace
trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 01:44:55 21:09:31 9 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
6d30ad4b30
NEW		 723226e19b [0] WinXP 35 of 36 07:29:00 07:29:00 1 none none:none
 PolyEnE| none trace
67a66839f7
NEW		 7b1fc808a3 [0] Win2K-f
WinXP		 37 of 41 21:00:16 22:14:59 2 none none:none
 none|none none trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 01:44:55 01:44:55 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 08:45:20 08:45:20 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
1987904b12
NEW		 9fd17c99f9 [0] WinXP 35 of 37 15:43:08 15:43:08 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
38e8f258e7
NEW
533d15b5ce
NEW		 871a2e904e [0]
c67adf46e2[0]		 Win2K-f 30 of 33 11:32:43 11:32:43 1 none none:none
ASM:Graph
 none|none
tElock|		 96% none
lines=126
embedded dns		 trace
trace
f3932b94a6
NEW		 910494cc45 [0] WinXP 40 of 41 00:22:24 00:22:24 1 none none:none
 none|none none trace
74b3d149e8
NEW		 cef0fa2981 [0] WinXP 39 of 40 05:46:19 05:46:19 1 none none:none
 PolyEnE| none trace
38e8f258e7
NEW		 871a2e904e [0] Win2K-f 12 of 40 11:32:43 11:32:43 1 none none:none
 none|none none trace
251a38aa02
NEW		 none[3] Win2K-f 10 of 41 08:50:55 08:50:55 1 none none:none
 none|none none trace
4ceccaec21
NEW		 6ffedb8be7 [0] WinXP 40 of 41 03:51:16 03:51:16 1 none none:none
 PolyEnE| none trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 18:21:10 18:21:10 1 none none:none
 PolyEnE| none trace
9b47736683
NEW		 79ecd1a24c [0] WinXP 36 of 40 06:00:13 06:00:13 1 none none:none
 none|none none trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 08:34:16 08:34:16 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
e9396f8538
NEW		 ebeffe0338 [0] Win2K-f 38 of 41 23:12:43 23:12:43 1 none none:none
 none|none none trace
d61760f6a1
NEW		 22542b9b5e [0] WinXP 33 of 36 11:17:36 11:17:36 1 none none:none
 PolyEnE| none trace
824d6a706e
NEW		 a66fd13bcb [0] WinXP 40 of 40 11:42:10 14:24:33 2 none none:none
 PolyEnE| none trace
94a5a65226
NEW		 none[4] WinXP 25 of 32 08:40:13 08:40:13 1 none none:none
 none|none none trace
38e8f258e7
NEW
533d15b5ce
NEW
58c343a8d8
NEW		 871a2e904e [0]
c67adf46e2[0]
none [0]		 Win2K-f 28 of 33 11:32:43 11:32:43 1 none none:none
ASM:Graph
none:none
 none|none
tElock|
Armadillo|		 0% none
lines=126
embedded dns
lines=91		 trace
trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 05:26:43 05:26:43 1 none none:none
 PolyEnE| 99% lines=68 trace
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 00:51:39 23:59:22 4 none none:none
 PolyEnE| none trace
d2c26e07fd
NEW		 none[4] WinXP 10 of 33 08:15:43 08:15:43 1 none none:none
 none|none none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 12:07:34 12:07:34 1 none none:none
 none|none 33% lines=60 trace
2e45ae247e
NEW		 36aa8cd03d [0] Win2K-f 0 of 33 14:56:51 14:56:51 1 none none:none
 Armadillo| none trace
41fba073ee
NEW		 4009c372b6 [0] Win2K-f 6 of 40 07:27:03 13:22:01 3 none none:none
 FASM| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 15:12:18 21:09:31 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
708f64b1b7
NEW		 a18ef8ac1f [0] WinXP 40 of 41 12:16:16 12:16:16 1 none none:none
 PolyEnE| none trace
1dc6518cdb
NEW		 ada684ff4d [0] Win2K-f 39 of 41 20:57:05 20:57:05 1 none none:none
 Armadillo| none trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 14:54:25 14:54:25 1 none none:none
 StarForce| none trace
854a629c22
NEW		 b093eb447c [0] WinXP 41 of 41 20:08:09 20:08:09 1 none none:none
 PolyEnE| none trace
5e28e18186
NEW		 aa4463e63f [0] WinXP 37 of 41 22:07:11 22:07:11 1 none none:none
 none|none none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 07:45:11 09:44:46 2 none ASM:Graph
 none|none 55% lines=59 trace
ebddbaef33
NEW		 246edc390a [0] WinXP 40 of 41 04:26:19 04:26:19 1 none none:none
 PolyEnE| none trace
8abb75cb76
NEW		 d343494cab [0] WinXP 37 of 41 21:55:26 21:55:26 1 none none:none
 none|none none trace