Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


14 September 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1b7635d92c
NEW
2315f33b48
NEW		 28cf6965a6 [0]
beaf33437c[0]		 WinXP 21 of 41 05:10:59 05:10:59 1 none none:none
none:none
 MEW|
ASProtect|		 none
none		 trace
trace
fcd4bae1af
NEW		 0286c9069c [0] WinXP 34 of 36 09:10:33 09:10:33 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 00:07:00 15:19:03 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
39336e51eb
NEW
524bc0f75c
NEW
820b27d4c6
NEW		 3f5ab71d39 [0]
d3e9510bb3[0]
1102de0215[0]		 WinXP 38 of 41 18:59:18 18:59:18 1 none none:none
none:none
none:none
 Neolite|
PENinja S|
Armadillo|		 none
none
none		 trace
trace
trace
168aab35a3
NEW
1b7635d92c
NEW
38e8f258e7
NEW
5e16714bab
NEW
667f0c59f3
NEW
95ca496b37
NEW		 60b730b97e [0]
28cf6965a6[0]
871a2e904e[0]
none [4]
8fe2be2095[0]
9c39a10179[0]		 Win2K-f 19 of 41 06:47:02 06:47:02 1 none ASM:Graph
none:none
none:none
none:none
ASM:Graph
none:none
 tElock|
MEW|
none|none
none|none
Armadillo|
none|none		 lines=120
embedded dns
none
none
none
lines=91
none		 trace
trace
trace
trace
trace
trace
2e45ae247e
NEW
53bfe15e91
NEW		 36aa8cd03d [0]
1473091351[0]		 Win2K-f
WinXP		 33 of 33 00:07:00 22:36:04 7 none none:none
ASM:Graph
 Armadillo|
tElock|		 96% none
lines=75
embedded dns		 trace
trace
1b7635d92c
NEW
2315f33b48
NEW
38e8f258e7
NEW
8a75955033
NEW
8f7d194ec8
NEW
9276c8b36b
NEW		 28cf6965a6 [0]
beaf33437c[0]
871a2e904e[0]
2bf3e548b9[0]
61110958ea[0]
none [0]		 WinXP 28 of 32 05:10:59 05:10:59 1 none none:none
none:none
none:none
ASM:Graph
none:none
ASM:Graph
 MEW|
ASProtect|
none|none
tElock|
ASProtect|
Armadillo|		 47% none
none
none
lines=126
embedded dns
none
lines=81		 trace
trace
trace
trace
trace
trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 17:02:24 17:02:24 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
e30fb27bda
NEW		 90ee26f451 [0] WinXP 33 of 33 13:01:15 13:01:15 1 none ASM:Graph
 MEW| 21% lines=185
embedded dns		 trace
492957db81
NEW		 none[0] WinXP 29 of 29 00:43:55 00:43:55 1 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
af61613efc
NEW		 33bace5770 [0] WinXP 40 of 41 06:23:01 06:23:01 1 none none:none
 none|none none trace
168aab35a3
NEW		 60b730b97e [0] Win2K-f 31 of 33 06:47:02 06:47:02 1 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 01:30:25 01:30:25 1 none none:none
 PolyEnE| none trace
168aab35a3
NEW
1b7635d92c
NEW
38e8f258e7
NEW
5e16714bab
NEW		 60b730b97e [0]
28cf6965a6[0]
871a2e904e[0]
none [4]		 Win2K-f 4 of 41 06:47:02 06:47:02 1 none ASM:Graph
none:none
none:none
none:none
 tElock|
MEW|
none|none
none|none		 lines=120
embedded dns
none
none
none		 trace
trace
trace
trace
1b7635d92c
NEW
2315f33b48
NEW
38e8f258e7
NEW
8a75955033
NEW		 28cf6965a6 [0]
beaf33437c[0]
871a2e904e[0]
2bf3e548b9[0]		 WinXP 29 of 32 05:10:59 05:10:59 1 none none:none
none:none
none:none
ASM:Graph
 MEW|
ASProtect|
none|none
tElock|		 96% none
none
none
lines=126
embedded dns		 trace
trace
trace
trace
2c31e3c966
NEW		 dca1fa0c85 [0] WinXP 40 of 41 02:30:47 02:30:47 1 none none:none
 PolyEnE| none trace
1b7635d92c
NEW
38e8f258e7
NEW		 28cf6965a6 [0]
871a2e904e[0]		 WinXP
Win2K-f		 12 of 40 05:10:59 08:19:43 3 none none:none
none:none
 MEW|
none|none		 none
none		 trace
trace
15d4d85dc0
NEW		 4c95ae4b3d [0] Win2K-f 32 of 32 15:28:50 15:28:50 1 none ASM:Graph
 StarForce| 98% lines=212
embedded dns		 trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 10:01:27 10:01:27 1 none none:none
 PolyEnE| none trace
39336e51eb
NEW
524bc0f75c
NEW		 3f5ab71d39 [0]
d3e9510bb3[0]		 WinXP 32 of 38 18:59:18 18:59:18 1 none none:none
none:none
 Neolite|
PENinja S|		 none
none		 trace
trace
1b7635d92c
NEW
38e8f258e7
NEW
dab4da4e21
NEW		 28cf6965a6 [0]
871a2e904e[0]
e63b813015[0]		 WinXP 37 of 39 08:19:43 08:19:43 1 none none:none
none:none
ASM:Graph
 MEW|
none|none
PolyEnE|		 100% none
none
lines=134		 trace
trace
trace
d4da7626da
NEW		 4fec689aa6 [0] WinXP 37 of 40 12:56:32 12:56:32 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
042774a2b7
NEW		 none[0] WinXP 29 of 29 13:58:24 13:58:24 1 none none:none
 PolyEnE| 100% lines=69
embedded dns		 trace
168aab35a3
NEW
1b7635d92c
NEW
38e8f258e7
NEW
5e16714bab
NEW
667f0c59f3
NEW		 60b730b97e [0]
28cf6965a6[0]
871a2e904e[0]
none [4]
8fe2be2095[0]		 Win2K-f 31 of 33 06:47:02 06:47:02 1 none ASM:Graph
none:none
none:none
none:none
ASM:Graph
 tElock|
MEW|
none|none
none|none
Armadillo|		 0% lines=120
embedded dns
none
none
none
lines=91		 trace
trace
trace
trace
trace
2e8703b63a
NEW		 570d889860 [0] Win2K-f 39 of 41 01:32:31 01:32:31 1 none none:none
 none|none none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 06:01:02 10:10:21 2 none none:none
 none|none 32% lines=61 trace
831f4ee0a7
NEW		 none[0] WinXP 29 of 29 06:42:25 06:42:25 1 none ASM:Graph
 none|none 100% lines=61 trace
694802b8ef
NEW		 433eb20eb6 [0] WinXP 40 of 41 10:37:56 10:37:56 1 none none:none
 PolyEnE| none trace
39336e51eb
NEW		 3f5ab71d39 [0] WinXP 29 of 41 18:59:18 18:59:18 1 none none:none
 Neolite| none trace
a0e262b14d
NEW		 4ae21c0514 [0] WinXP 23 of 41 03:31:28 03:31:28 1 none none:none
 StarForce| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 08:48:14 19:41:21 2 none none:none
 PolyEnE| 99% lines=68 trace
deffdf68e8
NEW		 2b011e15ba [0] Win2K-f 34 of 41 18:09:03 18:09:03 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 04:32:30 22:26:03 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
2e45ae247e
NEW		 36aa8cd03d [0] Win2K-f 0 of 33 22:36:04 22:36:04 1 none none:none
 Armadillo| none trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 13:14:58 13:14:58 1 none none:none
 none|none 33% lines=60 trace
894e794b2b
NEW		 aeb41eb7b9 [0] WinXP 36 of 41 14:22:12 14:22:12 1 none none:none
 Obsidium| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 03:19:50 03:19:50 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
9afe4b7bf1
NEW		 none[3] Win2K-f 12 of 41 20:17:48 20:17:48 1 none none:none
 none|none none trace
b8076e37ae
NEW		 52953fed05 [0] Win2K-f 28 of 41 12:00:25 12:00:25 1 none none:none
 StarForce| none trace
ed96c03ca8
NEW		 c0028e9e98 [0] WinXP 39 of 41 07:23:19 07:44:00 2 none none:none
 PolyEnE| none trace
3f8fb954df
NEW		 3ae32232fb [0] Win2K-f 40 of 41 10:36:27 10:36:27 1 none none:none
 StarForce| none trace
1b7635d92c
NEW		 28cf6965a6 [0] WinXP
Win2K-f		 21 of 41 05:10:59 08:19:43 3 none none:none
 MEW| none trace
c4c3a5fede
NEW		 0486bcf632 [0] Win2K-f 40 of 41 14:40:52 14:40:52 1 none none:none
 StarForce| none trace
2f6cc0e618
NEW		 f8f316af28 [0] WinXP 40 of 41 13:56:08 13:56:08 1 none none:none
 PolyEnE| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 13:26:42 15:18:46 2 none ASM:Graph
 none|none 55% lines=59 trace
1b7635d92c
NEW
2315f33b48
NEW
38e8f258e7
NEW
8a75955033
NEW
8f7d194ec8
NEW		 28cf6965a6 [0]
beaf33437c[0]
871a2e904e[0]
2bf3e548b9[0]
61110958ea[0]		 WinXP 26 of 41 05:10:59 05:10:59 1 none none:none
none:none
none:none
ASM:Graph
none:none
 MEW|
ASProtect|
none|none
tElock|
ASProtect|		 none
none
none
lines=126
embedded dns
none		 trace
trace
trace
trace
trace