Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


31 October 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
77656a2953
NEW		 13296a6198 [0] Win2K-f 40 of 41 15:13:51 15:13:51 1 none none:none
 tElock| none trace
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 17:53:09 17:53:09 1 none none:none
 Armadillo| none trace
5403724951
NEW		 44ee5f83ba [0] Win2K-f 40 of 41 00:54:22 00:54:22 1 none none:none
 tElock| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 04:25:44 21:39:29 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
5403724951
NEW
6494cbd582
NEW		 44ee5f83ba [0]
adcb56d0cb[0]		 Win2K-f 39 of 41 00:54:22 00:54:22 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
55067eaeb2
NEW		 b625785b95 [0] WinXP 39 of 41 15:15:14 15:15:14 1 none none:none
 PolyEnE| none trace
067917e07b
NEW
d764c1dcb2
NEW		 dae35b319c [0]
3d2bc60c5d[0]		 WinXP 38 of 40 16:05:07 16:05:07 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 02:15:16 21:39:29 13 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
77656a2953
NEW
a77e51636f
NEW		 13296a6198 [0]
c5e16ba6b7[0]		 Win2K-f 39 of 41 15:13:51 15:13:51 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
07fabc79ef
NEW		 none[0] WinXP 0 of 32 08:10:48 08:10:48 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 13:25:13 15:02:39 2 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 16:14:57 20:19:49 2 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
099ab52770
NEW		 57dca5e62a [0] WinXP 3 of 41 01:44:30 01:44:30 1 none none:none
 Armadillo| none trace
87bd0a062f
NEW		 dc70d9623a [0] Win2K-f 30 of 33 07:09:08 07:09:08 1 none none:none
 Armadillo| none trace
533d15b5ce
NEW		 c67adf46e2 [0] Win2K-f 30 of 33 18:23:30 18:23:30 1 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 01:11:02 01:11:02 1 none none:none
 PolyEnE| none trace
6a6aaa5b73
NEW
8bde6dd126
NEW		 63889c9976 [0]
885c68f500[0]		 Win2K-f 40 of 41 02:05:03 02:05:03 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 10:26:48 10:26:48 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
067917e07b
NEW		 dae35b319c [0] WinXP 36 of 41 16:05:07 16:05:07 1 none none:none
 Armadillo| none trace
6a6aaa5b73
NEW		 63889c9976 [0] Win2K-f 39 of 40 02:05:03 02:05:03 1 none none:none
 tElock| none trace
4c3df24b32
NEW		 none[0] Win2K-f 0 of 33 10:54:57 10:54:57 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 00:21:46 12:35:03 2 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
fb4903df3d
NEW		 75a01252ee [0] WinXP 39 of 41 11:11:07 11:11:07 1 none none:none
 PolyEnE| none trace
2d5fe9850a
NEW		 2233a191b2 [0] Win2K-f 39 of 41 14:53:23 14:53:23 1 none none:none
 tElock| none trace
533d15b5ce
NEW
58c343a8d8
NEW		 c67adf46e2 [0]
none [0]		 Win2K-f 28 of 33 18:23:30 18:23:30 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=126
embedded dns
lines=91		 trace
trace
ea88964f78
NEW		 e07a1b38de [0] WinXP 40 of 41 08:53:58 08:53:58 1 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 10:16:39 10:48:42 2 none none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 17:53:09 17:53:09 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
3f136c55b3
NEW		 f4e18974f3 [0] Win2K-f 39 of 41 14:40:46 14:40:46 1 none none:none
 tElock| none trace
55067eaeb2
NEW
d441b3f319
NEW		 b625785b95 [0]
e33b328c50[0]		 WinXP 38 of 41 15:15:14 15:15:14 1 none none:none
none:none
 PolyEnE|
Armadillo|		 none
none		 trace
trace
5aeab33849
NEW		 none[4] WinXP 29 of 33 05:47:24 05:47:24 1 none none:none
 none|none none trace
099ab52770
NEW
139c3683aa
NEW		 57dca5e62a [0]
3bf4725616[0]		 WinXP 39 of 41 01:44:30 01:44:30 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 07:09:57 07:09:57 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 02:15:16 20:12:02 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
87bd0a062f
NEW
c7d6018f97
NEW		 dc70d9623a [0]
5c1d8bbd5b[0]		 Win2K-f 31 of 33 07:09:08 07:09:08 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 03:42:22 03:42:22 1 none none:none
 StarForce| none trace
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 01:44:10 23:26:30 2 none ASM:Graph
 none|none 55% lines=59 trace
3f136c55b3
NEW
ac394d7d5f
NEW		 f4e18974f3 [0]
c9a79e75f5[0]		 Win2K-f 38 of 41 14:40:46 14:40:46 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
2d5fe9850a
NEW
63b64adf8b
NEW		 2233a191b2 [0]
b4e67ccf8a[0]		 Win2K-f 38 of 41 14:53:23 14:53:23 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace