Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



07 November 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
746be14f24
NEW
cf924d42a2 [0] WinXP 39 of 41 21:42:13 21:42:13 1 none none:none
StarForce| none trace
52e666bff9
NEW
321954f6f7 [0] WinXP 39 of 40 21:21:41 21:21:41 1 none none:none
PolyEnE| none trace
456a96f124
NEW
456a96f124 [1] WinXP 11 of 40 09:25:24 09:25:24 1 none ASM:Graph
StarForce| 17% lines=5 trace
5403724951
NEW
44ee5f83ba [0] WinXP 40 of 41 12:00:52 12:00:52 1 none none:none
tElock| none trace
10759405e0
NEW
292d343248 [0] Win2K-f 38 of 41 06:39:06 23:12:44 3 none none:none
Armadillo| none trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP 0 of 32 13:11:58 23:24:13 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
5403724951
NEW
6494cbd582
NEW
44ee5f83ba [0]
adcb56d0cb[0]
WinXP 39 of 41 12:00:52 12:00:52 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 01:13:45 23:24:13 8 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
8a75955033
NEW
9276c8b36b
NEW
2bf3e548b9 [0]
none [0]
WinXP 28 of 32 19:55:12 19:55:12 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
47% lines=126
embedded dns
lines=81
trace
trace
311050e152
NEW
a2a034e6b7 [0] Win2K-f 39 of 41 06:39:04 06:39:04 1 none none:none
tElock| none trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
58c343a8d8
NEW
7fd0cf123f
NEW
c1a01c30b7
NEW
c34274026b
NEW
ebe63379cf
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
none [0]
none [4]
2b31d4081f[0]
7acee6dc24[0]
a1ce03d5db[0]
WinXP 8 of 40 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
none:none
none:none
none:none
StarForce|
StarForce|
tElock|
Armadillo|
none|none
StarForce|
Neolite|
Armadillo|
lines=5
none
lines=126
embedded dns
lines=91
none
none
none
none
trace
trace
trace
trace
trace
trace
trace
trace
311050e152
NEW
3569154ead
NEW
a2a034e6b7 [0]
491aa22d23[0]
Win2K-f 39 of 41 06:39:04 06:39:04 1 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
53bfe15e91
NEW
b7082104e4
NEW
1473091351 [0]
c5b49e7b82[0]
WinXP 8 of 33 05:16:36 05:16:36 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
100% lines=75
embedded dns
lines=41
trace
trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
58c343a8d8
NEW
7fd0cf123f
NEW
c1a01c30b7
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
none [0]
none [4]
2b31d4081f[0]
WinXP 8 of 40 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
none:none
StarForce|
StarForce|
tElock|
Armadillo|
none|none
StarForce|
lines=5
none
lines=126
embedded dns
lines=91
none
none
trace
trace
trace
trace
trace
trace
b502f83a7c
NEW
28f5be93b0 [0] WinXP 32 of 32 03:25:34 03:25:34 1 none none:none
PolyEnE| none trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
WinXP 30 of 33 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
StarForce|
StarForce|
tElock|
96% lines=5
none
lines=126
embedded dns
trace
trace
trace
5818023061
NEW
none[0] WinXP 32 of 32 13:46:34 13:46:34 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
8a75955033
NEW
2bf3e548b9 [0] WinXP 29 of 32 19:55:12 19:55:12 1 none ASM:Graph
tElock| 96% lines=126
embedded dns
trace
7f60162c2c
NEW
none[0] WinXP 25 of 25 10:17:58 10:17:58 1 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
741e3b03b3
NEW
none[0] WinXP 31 of 32 05:40:36 05:40:36 1 none none:none
none|none 32% lines=61 trace
c7ee9d8cdf
NEW
none[3] WinXP 14 of 40 05:34:52 05:34:52 1 none none:none
tElock| none trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
58c343a8d8
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
none [0]
WinXP 28 of 33 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
none:none
StarForce|
StarForce|
tElock|
Armadillo|
0% lines=5
none
lines=126
embedded dns
lines=91
trace
trace
trace
trace
e1693609f9
NEW
none[3] WinXP 17 of 41 17:26:03 17:26:03 1 none none:none
none|none none trace
17028f1eda
NEW
none[3] WinXP 31 of 32 04:37:56 04:45:15 2 none none:none
tElock| none trace
10759405e0
NEW
d08e00dfaf
NEW
292d343248 [0]
854c49d8c4[0]
Win2K-f 39 of 41 06:39:06 23:12:44 3 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
58c343a8d8
NEW
7fd0cf123f
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
none [0]
none [4]
WinXP 0 of 40 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
StarForce|
StarForce|
tElock|
Armadillo|
none|none
lines=5
none
lines=126
embedded dns
lines=91
none
trace
trace
trace
trace
trace
519a1b24b1
NEW
cdbe659c05 [0] Win2K-f 38 of 41 13:49:20 13:49:20 1 none none:none
Armadillo| none trace
57ce4acac2
NEW
none[0] Win2K-f 0 of 33 18:44:57 18:44:57 1 none none:none
Armadillo| 0% lines=90 trace
456a96f124
NEW
4c05b888c6
NEW
533d15b5ce
NEW
58c343a8d8
NEW
7fd0cf123f
NEW
c1a01c30b7
NEW
c34274026b
NEW
456a96f124 [1]
9c28c3b439[0]
c67adf46e2[0]
none [0]
none [4]
2b31d4081f[0]
7acee6dc24[0]
WinXP 11 of 40 09:25:24 09:25:24 1 none ASM:Graph
none:none
ASM:Graph
none:none
none:none
none:none
none:none
StarForce|
StarForce|
tElock|
Armadillo|
none|none
StarForce|
Neolite|
lines=5
none
lines=126
embedded dns
lines=91
none
none
none
trace
trace
trace
trace
trace
trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 01:13:45 12:43:20 3 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
96a79de8e8
NEW
d2e5adecb7 [0] WinXP 39 of 41 23:26:54 23:26:54 1 none none:none
PolyEnE| none trace
5285741560
NEW
60590b8b67 [0] WinXP 37 of 40 05:02:33 05:02:33 1 none ASM:Graph
none|none 55% lines=59 trace
456a96f124
NEW
4c05b888c6
NEW
456a96f124 [1]
9c28c3b439[0]
WinXP 14 of 40 09:25:24 09:25:24 1 none ASM:Graph
none:none
StarForce|
StarForce|
lines=5
none
trace
trace