Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


10 December 2009

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
c29650b2e7
NEW
de5125b518
NEW
e98e7ae11e
NEW
ee7d64d1fa
NEW
fc23e7d50f
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 41 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none
none		 none
none
trace
trace
none
none
none
none
none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 20:04:03 20:04:03 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 05:37:18 22:08:49 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
dc331fb791
NEW		 none[3] Win2K-f 3 of 37 17:29:31 22:41:23 3 none none:none
 UPX| none trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 03:33:56 03:33:56 1 none none:none
 none|none 32% lines=61 trace
a4497aa84e
NEW		 none[none] Win2K-f 41 of 41 00:28:04 00:28:04 1 none none:none
 none|none none none
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
c29650b2e7
NEW
de5125b518
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]
none [none]
none [none]		 Win2K-f 6 of 41 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none
none|none		 none
none
none
none
none
none		 none
none
trace
trace
none
none
00541de1ab
NEW
6724d42b18
NEW		 none[none]
94a1eb4d51[none]		 Win2K-f 14 of 41 14:57:05 14:57:05 1 none none:none
none:none
 none|none
UPX|		 none
none		 none
none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 02:00:34 23:46:18 12 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
2721d2b151
NEW		 fde14d4abe [0] Win2K-f 37 of 40 21:19:29 21:19:29 1 none none:none
 Armadillo| none trace
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]		 Win2K-f 32 of 33 14:57:05 14:57:05 1 none none:none
none:none
none:none
 none|none
UPX|
tElock|		 none
none
none		 none
none
trace
8b28f44ef4
NEW		 7234ef5a3c [none] WinXP 38 of 41 13:40:14 13:40:14 1 none none:none
 PolyEnE| none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 WinXP
Win2K-f		 8 of 33 15:06:42 17:56:11 2 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
c29650b2e7
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]
none [none]		 Win2K-f 16 of 41 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none		 none
none
none
none
none		 none
none
trace
trace
none
b26ed6eeac
NEW		 97c1157bf8 [0] WinXP 41 of 41 14:37:37 14:37:37 1 none none:none
 PolyEnE| none trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 12:23:02 20:42:40 2 none none:none
 PolyEnE| 99% lines=68 trace
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
c29650b2e7
NEW
de5125b518
NEW
e98e7ae11e
NEW
ee7d64d1fa
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 21 of 41 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none		 none
none
trace
trace
none
none
none
none
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW
c29650b2e7
NEW
de5125b518
NEW
e98e7ae11e
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]
none [none]
none [none]
none [none]		 Win2K-f 6 of 41 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|
none|none
none|none
none|none		 none
none
none
none
none
none
none		 none
none
trace
trace
none
none
none
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 04:51:19 04:51:19 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
9d94bc6743
NEW		 a42cc1cd6b [0] WinXP 39 of 41 07:43:20 07:43:20 1 none none:none
 PolyEnE| none trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 02:00:34 23:46:18 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 08:36:02 10:23:33 2 none none:none
 PolyEnE| none trace
2721d2b151
NEW
b044168966
NEW		 fde14d4abe [0]
b02ac1f831[0]		 Win2K-f 38 of 40 21:19:29 21:19:29 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
a12cab51ef
NEW		 none[0] WinXP 29 of 29 07:02:04 07:02:04 1 none none:none
 ASPack| 54% lines=281
embedded dns		 trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 15:19:24 15:19:24 1 none none:none
 StarForce| none trace
00541de1ab
NEW		 none[none] Win2K-f 24 of 41 14:57:05 14:57:05 1 none none:none
 none|none none none
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 19:06:53 19:06:53 1 none ASM:Graph
 none|none 55% lines=59 trace
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 08:03:13 08:03:13 1 none none:none
 PolyEnE| none trace
00541de1ab
NEW
6724d42b18
NEW
87e1117f2a
NEW
b4fe4581c3
NEW		 none[none]
94a1eb4d51[none]
3ff643aae6[0]
599b835896[0]		 Win2K-f 29 of 33 14:57:05 14:57:05 1 none none:none
none:none
none:none
none:none
 none|none
UPX|
tElock|
Armadillo|		 none
none
none
none		 none
none
trace
trace
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 18:03:43 20:50:27 4 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace