Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


12 November 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3b3a6d7615
NEW		 ed7beb96f5 [0] WinXP 39 of 41 07:27:03 07:27:03 1 none none:none
 Armadillo| none trace
360349d884
NEW		 2f06bfa2ce [0] WinXP 40 of 41 03:25:07 03:25:07 1 none none:none
 none|none none trace
0db52c5b7e
NEW		 abf142b6d2 [0] WinXP 40 of 41 04:39:08 04:39:08 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 21:53:00 21:53:00 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
2f859b417d
NEW
f8b6f00e25
NEW		 6228335a99 [0]
61b9e19319[0]		 WinXP 40 of 41 04:24:33 04:24:33 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
3580d8b30c
NEW
54fedc66c1
NEW
83192a6119
NEW		 9d6755a0ed [0]
09a641355b[0]
fdc95e1fab[0]		 Win2K-f 15 of 41 00:19:41 00:35:26 2 none none:none
none:none
none:none
 Armadillo|
StarForce|
none|none		 none
none
none		 trace
trace
trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 09:40:03 21:53:00 4 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
2fa130feec
NEW
85c00cc118
NEW
8a75955033
NEW
8ad7f49981
NEW
9276c8b36b
NEW		 8a06db2aef [0]
none [3]
2bf3e548b9[0]
eaacfaa7cc[0]
none [0]		 WinXP 28 of 32 21:47:39 21:47:39 1 none none:none
none:none
ASM:Graph
none:none
ASM:Graph
 Armadillo|
StarForce|
tElock|
StarForce|
Armadillo|		 47% none
none
lines=126
embedded dns
none
lines=81		 trace
trace
trace
trace
trace
df17a625ee
NEW		 none[0] WinXP 29 of 29 11:26:21 11:26:21 1 none none:none
 ASPack| 72% lines=298
embedded dns		 trace
1c5e79f5f4
NEW
1fb2d22a72
NEW
6ec2a8994b
NEW		 none[4]
5521dc25e0[0]
398aab9636[0]		 Win2K-f 30 of 33 04:23:19 04:23:19 1 none none:none
none:none
none:none
 FSG|
Neolite|
tElock|		 none
none
none		 trace
trace
trace
1c5e79f5f4
NEW
1fb2d22a72
NEW		 none[4]
5521dc25e0[0]		 Win2K-f 15 of 41 04:23:19 04:34:46 2 none none:none
none:none
 FSG|
Neolite|		 none
none		 trace
trace
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 09:40:03 09:40:03 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
2fa130feec
NEW
85c00cc118
NEW
8a75955033
NEW
8ad7f49981
NEW		 8a06db2aef [0]
none [3]
2bf3e548b9[0]
eaacfaa7cc[0]		 WinXP
Win2K-f		 3 of 41 04:39:08 21:47:39 3 none none:none
none:none
ASM:Graph
none:none
 Armadillo|
StarForce|
tElock|
StarForce|		 none
none
lines=126
embedded dns
none		 trace
trace
trace
trace
2f859b417d
NEW		 6228335a99 [0] WinXP 40 of 41 04:24:33 04:24:33 1 none none:none
 tElock| none trace
3580d8b30c
NEW
54fedc66c1
NEW		 9d6755a0ed [0]
09a641355b[0]		 Win2K-f 5 of 41 00:19:41 05:10:25 3 none none:none
none:none
 Armadillo|
StarForce|		 none
none		 trace
trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 00:07:23 00:07:23 1 none none:none
 PolyEnE| none trace
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 06:29:46 06:30:12 2 none none:none
 PolyEnE| none trace
3580d8b30c
NEW
54fedc66c1
NEW
785e86954f
NEW
8ad7f49981
NEW
9354673997
NEW		 9d6755a0ed [0]
09a641355b[0]
c6edee8e8b[0]
eaacfaa7cc[0]
60e874b776[0]		 Win2K-f 29 of 41 04:23:19 05:10:25 2 none none:none
none:none
none:none
none:none
none:none
 Armadillo|
StarForce|
PeStubOEP|
StarForce|
none|none		 none
none
none
none
none		 trace
trace
trace
trace
trace
2fa130feec
NEW
85c00cc118
NEW		 8a06db2aef [0]
none [3]		 WinXP 7 of 41 21:47:39 21:47:39 1 none none:none
none:none
 Armadillo|
StarForce|		 none
none		 trace
trace
2fa130feec
NEW
85c00cc118
NEW
8a75955033
NEW		 8a06db2aef [0]
none [3]
2bf3e548b9[0]		 WinXP 29 of 32 21:47:39 21:47:39 1 none none:none
none:none
ASM:Graph
 Armadillo|
StarForce|
tElock|		 96% none
none
lines=126
embedded dns		 trace
trace
trace
1c5e79f5f4
NEW
1fb2d22a72
NEW
6ec2a8994b
NEW
785e86954f
NEW
9354673997
NEW
af694434d0
NEW
bcf66a38c8
NEW
bd9617b7ed
NEW		 none[4]
5521dc25e0[0]
398aab9636[0]
c6edee8e8b[0]
60e874b776[0]
none [4]
570133b348[0]
084006c169[0]		 Win2K-f 13 of 41 04:23:19 04:23:19 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 FSG|
Neolite|
tElock|
PeStubOEP|
none|none
none|none
Armadillo|
StarForce|		 none
none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
trace
631d81b2cc
NEW		 9732e5594a [0] WinXP 40 of 41 08:58:40 08:58:40 1 none none:none
 PolyEnE| none trace
0db52c5b7e
NEW
1c5e79f5f4
NEW
785e86954f
NEW
8ad7f49981
NEW
a0e59e4658
NEW
db8b1ad1b7
NEW		 abf142b6d2 [0]
none [4]
c6edee8e8b[0]
eaacfaa7cc[0]
none [4]
00b341ed46[0]		 Win2K-f
WinXP		 40 of 41 04:34:46 04:39:08 2 none none:none
none:none
none:none
none:none
none:none
none:none
 PolyEnE|
FSG|
PeStubOEP|
StarForce|
Obsidium|
ASProtect|		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
0ace068c68
NEW		 0ace621749 [0] WinXP 40 of 41 05:49:34 05:49:34 1 none none:none
 StarForce| none trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 17:26:08 17:26:08 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
3cda08154d
NEW		 none[4] Win2K-f 0 of 41 04:59:22 04:59:22 1 none none:none
 none|none none trace
2fa130feec
NEW		 8a06db2aef [0] WinXP 10 of 41 21:47:39 21:47:39 1 none none:none
 Armadillo| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 12:32:00 12:32:00 1 none none:none
 none|none 32% lines=61 trace
3580d8b30c
NEW
54fedc66c1
NEW
598636aa73
NEW		 9d6755a0ed [0]
09a641355b[0]
613af3f9a2[0]		 Win2K-f 37 of 41 00:19:41 00:19:41 1 none none:none
none:none
none:none
 Armadillo|
StarForce|
Armadillo|		 none
none
none		 trace
trace
trace
5213395833
NEW		 515eacbc36 [0] Win2K-f 41 of 41 13:05:28 22:19:10 2 none none:none
 tElock| none trace
eda3b7766c
NEW		 7556343561 [0] WinXP 40 of 41 06:14:42 06:14:42 1 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 07:46:30 07:46:30 1 none none:none
 PolyEnE| 99% lines=68 trace
3580d8b30c
NEW
54fedc66c1
NEW
785e86954f
NEW		 9d6755a0ed [0]
09a641355b[0]
c6edee8e8b[0]		 Win2K-f
WinXP		 29 of 41 04:23:19 05:10:25 4 none none:none
none:none
none:none
 Armadillo|
StarForce|
PeStubOEP|		 none
none
none		 trace
trace
trace
0db52c5b7e
NEW
1c5e79f5f4
NEW
785e86954f
NEW
8ad7f49981
NEW
a0e59e4658
NEW		 abf142b6d2 [0]
none [4]
c6edee8e8b[0]
eaacfaa7cc[0]
none [4]		 Win2K-f
WinXP		 15 of 41 04:34:46 04:39:08 2 none none:none
none:none
none:none
none:none
none:none
 PolyEnE|
FSG|
PeStubOEP|
StarForce|
Obsidium|		 none
none
none
none
none		 trace
trace
trace
trace
trace
deffdf68e8
NEW		 2b011e15ba [0] Win2K-f 34 of 41 20:33:10 20:33:10 1 none none:none
 StarForce| none trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 14:44:28 14:44:28 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1c5e79f5f4
NEW
1fb2d22a72
NEW
6ec2a8994b
NEW
785e86954f
NEW
9354673997
NEW
af694434d0
NEW
bcf66a38c8
NEW		 none[4]
5521dc25e0[0]
398aab9636[0]
c6edee8e8b[0]
60e874b776[0]
none [4]
570133b348[0]		 Win2K-f 2 of 35 04:23:19 04:23:19 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 FSG|
Neolite|
tElock|
PeStubOEP|
none|none
none|none
Armadillo|		 none
none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
trace
3580d8b30c
NEW
54fedc66c1
NEW
598636aa73
NEW
83192a6119
NEW
a57ddcdef0
NEW		 9d6755a0ed [0]
09a641355b[0]
613af3f9a2[0]
fdc95e1fab[0]
none [4]		 Win2K-f 38 of 41 00:19:41 00:19:41 1 none none:none
none:none
none:none
none:none
none:none
 Armadillo|
StarForce|
Armadillo|
none|none
PolyEnE|		 none
none
none
none
none		 trace
trace
trace
trace
trace
0db52c5b7e
NEW
1c5e79f5f4
NEW		 abf142b6d2 [0]
none [4]		 Win2K-f
WinXP		 17 of 41 04:23:19 04:39:08 3 none none:none
none:none
 PolyEnE|
FSG|		 none
none		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 18:04:19 18:04:19 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 20:35:20 20:35:20 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
5213395833
NEW
9fdf6de4a9
NEW		 515eacbc36 [0]
794f9a1087[0]		 Win2K-f 6 of 41 13:05:28 22:19:10 2 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
3b3a6d7615
NEW
b7a694b220
NEW		 ed7beb96f5 [0]
9f0354af30[0]		 WinXP 40 of 41 07:27:03 07:27:03 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
1c5e79f5f4
NEW
1fb2d22a72
NEW
618ccd63ab
NEW		 none[4]
5521dc25e0[0]
f9cc5adff4[0]		 Win2K-f 18 of 41 04:34:46 04:34:46 1 none none:none
none:none
none:none
 FSG|
Neolite|
FSG|		 none
none
none		 trace
trace
trace
3580d8b30c
NEW
54fedc66c1
NEW
83192a6119
NEW
b65cbfbc73
NEW		 9d6755a0ed [0]
09a641355b[0]
fdc95e1fab[0]
25e284e2e5[0]		 Win2K-f 10 of 41 00:35:26 00:35:26 1 none none:none
none:none
none:none
none:none
 Armadillo|
StarForce|
none|none
StarForce|		 none
none
none
none		 trace
trace
trace
trace
1c5e79f5f4
NEW
1fb2d22a72
NEW
6ec2a8994b
NEW
785e86954f
NEW
9354673997
NEW
af694434d0
NEW		 none[4]
5521dc25e0[0]
398aab9636[0]
c6edee8e8b[0]
60e874b776[0]
none [4]		 Win2K-f 0 of 41 04:23:19 04:23:19 1 none none:none
none:none
none:none
none:none
none:none
none:none
 FSG|
Neolite|
tElock|
PeStubOEP|
none|none
none|none		 none
none
none
none
none
none		 trace
trace
trace
trace
trace
trace
3580d8b30c
NEW		 9d6755a0ed [0] Win2K-f 23 of 41 00:19:41 05:10:25 3 none none:none
 Armadillo| none trace