Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


25 October 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
ab18ae9e1e
NEW
be6a801f35
NEW
f725e57065
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
4e52da0585[0]
none [4]
3f11911aa9[0]		 WinXP
Win2K-f		 13 of 41 01:24:47 07:54:59 2 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
none:none
 tElock|
FSG|
Armadillo|
StarForce|
FSG|
tElock|		 lines=120
embedded dns
none
lines=91
none
none
none		 trace
trace
trace
trace
trace
trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 05:25:19 19:42:55 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 01:54:29 19:42:55 6 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
5e3a9c2d9d
NEW		 dbc48b815a [0] WinXP 40 of 41 12:40:21 12:40:21 1 none none:none
 tElock| none trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 02:04:00 02:04:00 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 14:53:09 14:53:09 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
ab18ae9e1e
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
4e52da0585[0]		 Win2K-f 39 of 41 07:54:59 07:54:59 1 none ASM:Graph
none:none
ASM:Graph
none:none
 tElock|
FSG|
Armadillo|
StarForce|		 lines=120
embedded dns
none
lines=91
none		 trace
trace
trace
trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
69fc311372
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
60e2e88cf8[0]		 WinXP 16 of 41 01:24:47 01:24:47 1 none ASM:Graph
none:none
ASM:Graph
none:none
 tElock|
FSG|
Armadillo|
Armadillo|		 lines=120
embedded dns
none
lines=91
none		 trace
trace
trace
trace
9d8ec60aeb
NEW		 97d170c714 [0] WinXP 29 of 29 19:50:21 19:50:21 1 none none:none
 PolyEnE| none trace
1eafd24c64
NEW		 91efa90c65 [0] Win2K-f 40 of 41 02:08:38 02:08:38 1 none none:none
 StarForce| none trace
168aab35a3
NEW		 60b730b97e [0] WinXP
Win2K-f		 31 of 33 01:24:47 07:54:59 2 none ASM:Graph
 tElock| 95% lines=120
embedded dns		 trace
9850931e93
NEW		 443d54cb48 [0] WinXP 39 of 41 00:59:14 00:59:14 1 none none:none
 tElock| none trace
f80016e84c
NEW		 f3e7dc60de [0] WinXP 37 of 39 12:55:52 12:55:52 1 none none:none
 PolyEnE| none trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 16:16:19 16:16:19 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 05:11:04 13:44:08 2 none none:none
 PolyEnE| none trace
2949a0ad17
NEW		 0b5f65174a [0] WinXP 41 of 41 10:29:20 10:29:20 1 none none:none
 ASPack| none trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
69fc311372
NEW
dd96e88e03
NEW
f44246eaa0
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
60e2e88cf8[0]
6f87541765[0]
6879615dcf[0]		 WinXP 9 of 41 01:24:47 01:24:47 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
none:none
 tElock|
FSG|
Armadillo|
Armadillo|
StarForce|
StarForce|		 lines=120
embedded dns
none
lines=91
none
none
none		 trace
trace
trace
trace
trace
trace
ca8bd5c40e
NEW		 9cb687217f [0] WinXP 40 of 41 01:53:26 01:53:26 1 none none:none
 PolyEnE| none trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 09:08:34 09:08:34 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]		 WinXP
Win2K-f		 31 of 33 01:24:47 07:54:59 2 none ASM:Graph
none:none
ASM:Graph
 tElock|
FSG|
Armadillo|		 0% lines=120
embedded dns
none
lines=91		 trace
trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 05:08:46 05:08:46 1 none none:none
 none|none 32% lines=61 trace
1eafd24c64
NEW
b5edcbfd2a
NEW		 91efa90c65 [0]
c30d825691[0]		 Win2K-f 39 of 41 02:08:38 02:08:38 1 none none:none
none:none
 StarForce|
Armadillo|		 none
none		 trace
trace
9850931e93
NEW
e770121662
NEW		 443d54cb48 [0]
ac4b533671[0]		 WinXP 38 of 41 00:59:14 00:59:14 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
1e12f5145a
NEW
f208493e65
NEW		 617af909de [0]
5100adb4f9[0]		 Win2K-f 40 of 41 03:38:06 03:38:06 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
69fc311372
NEW
dd96e88e03
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
60e2e88cf8[0]
6f87541765[0]		 WinXP 26 of 41 01:24:47 01:24:47 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
 tElock|
FSG|
Armadillo|
Armadillo|
StarForce|		 lines=120
embedded dns
none
lines=91
none
none		 trace
trace
trace
trace
trace
5e3a9c2d9d
NEW
630308d06b
NEW		 dbc48b815a [0]
847d302e37[0]		 WinXP 39 of 41 12:40:21 12:40:21 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
17028f1eda
NEW		 none[3] WinXP 31 of 32 19:07:41 19:07:41 1 none none:none
 tElock| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 15:37:37 15:37:37 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
168aab35a3
NEW
1c5e79f5f4
NEW		 60b730b97e [0]
none [4]		 WinXP
Win2K-f		 17 of 41 01:24:47 07:54:59 2 none ASM:Graph
none:none
 tElock|
FSG|		 lines=120
embedded dns
none		 trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 01:54:29 11:20:27 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1e12f5145a
NEW		 617af909de [0] Win2K-f 39 of 41 03:38:06 03:38:06 1 none none:none
 Armadillo| none trace
708f64b1b7
NEW		 a18ef8ac1f [0] WinXP 40 of 41 05:57:01 05:57:01 1 none none:none
 PolyEnE| none trace
168aab35a3
NEW
1c5e79f5f4
NEW
667f0c59f3
NEW
ab18ae9e1e
NEW
be6a801f35
NEW		 60b730b97e [0]
none [4]
8fe2be2095[0]
4e52da0585[0]
none [4]		 Win2K-f 24 of 40 07:54:59 07:54:59 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
 tElock|
FSG|
Armadillo|
StarForce|
FSG|		 lines=120
embedded dns
none
lines=91
none
none		 trace
trace
trace
trace
trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 09:24:41 09:24:41 1 none ASM:Graph
 none|none 55% lines=59 trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 00:57:59 20:42:37 4 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace