Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


08 January 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
10759405e0
NEW		 292d343248 [0] WinXP 38 of 41 15:34:58 15:34:58 1 none none:none
 Armadillo| none trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 32 12:00:42 14:56:12 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
4b7cd8e5ae
NEW
598636aa73
NEW
62068d3faf
NEW		 none[none]
613af3f9a2[0]
none [none]		 WinXP 10 of 41 08:10:57 08:10:57 1 none none:none
none:none
none:none
 none|none
Armadillo|
none|none		 none
none
none		 none
trace
none
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 00:41:23 22:09:33 10 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
8a75955033
NEW
9276c8b36b
NEW		 2bf3e548b9 [0]
none [0]		 Win2K-f 28 of 32 01:29:46 01:29:46 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 47% lines=126
embedded dns
lines=81		 trace
trace
4c3df24b32
NEW
828664c208
NEW
847f741e7a
NEW
a836ced040
NEW
aa84072c02
NEW		 none[0]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 39 of 41 16:46:22 16:46:22 1 none ASM:Graph
none:none
none:none
none:none
none:none
 Armadillo|
none|none
none|none
none|none
none|none		 lines=81
none
none
none
none		 trace
none
none
none
none
0c8664e61b
NEW
0f9fd715ea
NEW
454b388231
NEW
df17a625ee
NEW		 none[none]
none [none]
none [none]
none [0]		 WinXP 29 of 29 17:14:53 17:14:53 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
ASPack|		 72% none
none
none
lines=298
embedded dns		 none
none
none
trace
57c9c443d2
NEW		 none[none] Win2K-f 12 of 41 17:01:57 17:01:57 1 none none:none
 none|none none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 19:57:36 19:57:36 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
987483e54a
NEW		 none[none] WinXP 34 of 41 05:12:27 05:12:27 1 none none:none
 none|none none none
4c3df24b32
NEW
828664c208
NEW
847f741e7a
NEW		 none[0]
none [none]
none [none]		 Win2K-f 2 of 40 16:46:22 16:46:22 1 none ASM:Graph
none:none
none:none
 Armadillo|
none|none
none|none		 lines=81
none
none		 trace
none
none
4c3df24b32
NEW
828664c208
NEW		 none[0]
none [none]		 Win2K-f 6 of 40 16:46:22 16:46:22 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
0c8664e61b
NEW
0f9fd715ea
NEW
454b388231
NEW		 none[none]
none [none]
none [none]		 WinXP 0 of 40 17:14:53 17:14:53 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
15953b80a1
NEW		 none[none] Win2K-f 39 of 41 19:33:25 19:33:25 1 none none:none
 none|none none none
912a073945
NEW		 7874c7f21e [0] WinXP 39 of 41 21:52:13 21:52:13 1 none none:none
 PolyEnE| none trace
0c8664e61b
NEW		 none[none] WinXP 0 of 41 17:14:53 17:14:53 1 none none:none
 none|none none none
4b7cd8e5ae
NEW
598636aa73
NEW
62068d3faf
NEW
a57ddcdef0
NEW
a836ced040
NEW
bfa58926f3
NEW		 none[none]
613af3f9a2[0]
none [none]
none [4]
none [none]
none [none]		 WinXP 0 of 40 08:10:57 08:10:57 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
Armadillo|
none|none
PolyEnE|
none|none
none|none		 none
none
none
none
none
none		 none
trace
none
trace
none
none
8a75955033
NEW		 2bf3e548b9 [0] Win2K-f 29 of 32 01:29:46 01:29:46 1 none ASM:Graph
 tElock| 96% lines=126
embedded dns		 trace
03f912899b
NEW		 none[0] WinXP 32 of 32 08:12:51 08:12:51 1 none none:none
 none|none 32% lines=64 trace
3e04c65ec3
NEW
4b7cd8e5ae
NEW
5cdd8b7cca
NEW		 none[none]
none [none]
none [none]		 Win2K-f 39 of 40 20:15:51 20:15:51 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
fb66246b60
NEW		 none[none] Win2K-f 40 of 41 06:15:06 06:15:06 1 none none:none
 none|none none none
4c3df24b32
NEW		 none[0] Win2K-f 0 of 33 16:46:22 16:46:22 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 16:23:47 16:23:47 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
568b9e866c
NEW
5c20c3472e
NEW		 none[none]
none [none]		 WinXP 37 of 41 17:26:49 17:26:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3e04c65ec3
NEW
4b7cd8e5ae
NEW
5cdd8b7cca
NEW
9d48520478
NEW
a836ced040
NEW
e68043c227
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 8 of 41 16:46:22 20:15:51 2 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
a836ced040
NEW
f1ac647184
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 20 of 41 01:29:46 20:34:52 6 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4180c19d91
NEW
b6e91e001c
NEW		 9f3f2de385 [0]
d2275a6cf5[0]		 Win2K-f 38 of 41 09:37:08 09:37:08 1 none none:none
none:none
 Armadillo|
PolyEnE|		 none
none		 trace
trace
0c8664e61b
NEW
0f9fd715ea
NEW		 none[none]
none [none]		 WinXP 0 of 41 17:14:53 17:14:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3e04c65ec3
NEW
4b7cd8e5ae
NEW		 none[none]
none [none]		 WinXP
Win2K-f		 7 of 39 08:10:57 20:15:51 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a836ced040
NEW
dd96e88e03
NEW		 none[none]
6f87541765[0]		 WinXP
Win2K-f		 26 of 41 08:10:57 17:12:47 3 none none:none
none:none
 none|none
StarForce|		 none
none		 none
trace
4b7cd8e5ae
NEW
598636aa73
NEW		 none[none]
613af3f9a2[0]		 WinXP 37 of 41 08:10:57 08:10:57 1 none none:none
none:none
 none|none
Armadillo|		 none
none		 none
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 05:52:57 10:44:22 2 none none:none
 PolyEnE| 99% lines=68 trace
568b9e866c
NEW		 none[none] WinXP 37 of 41 17:26:49 17:26:49 1 none none:none
 none|none none none
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 WinXP 39 of 41 15:34:58 15:34:58 1 none none:none
none:none
 Armadillo|
tElock|		 none
none		 trace
trace
4b7cd8e5ae
NEW
598636aa73
NEW
62068d3faf
NEW
a57ddcdef0
NEW		 none[none]
613af3f9a2[0]
none [none]
none [4]		 WinXP 38 of 41 08:10:57 08:10:57 1 none none:none
none:none
none:none
none:none
 none|none
Armadillo|
none|none
PolyEnE|		 none
none
none
none		 none
trace
none
trace
15953b80a1
NEW
def7923243
NEW		 none[none]
none [none]		 Win2K-f 14 of 40 19:33:25 19:33:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 00:41:23 22:09:33 6 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
c1868a3b2b
NEW		 05bc798a8d [none] WinXP 39 of 41 10:09:34 10:09:34 1 none none:none
 PolyEnE| none none
3e04c65ec3
NEW
4b7cd8e5ae
NEW
5cdd8b7cca
NEW
9d48520478
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 0 of 41 20:15:51 20:15:51 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 19:02:24 19:02:24 1 none none:none
 PolyEnE| none trace
3e04c65ec3
NEW		 none[none] Win2K-f 40 of 41 20:15:51 20:15:51 1 none none:none
 none|none none none
4180c19d91
NEW		 9f3f2de385 [0] Win2K-f 37 of 41 09:37:08 09:37:08 1 none none:none
 Armadillo| none trace
4c3df24b32
NEW
828664c208
NEW
847f741e7a
NEW
a836ced040
NEW
aa84072c02
NEW
dd96e88e03
NEW
e68043c227
NEW
f1ac647184
NEW
f56a2282ae
NEW		 none[0]
none [none]
none [none]
none [none]
none [none]
6f87541765[0]
none [none]
none [none]
none [none]		 Win2K-f 0 of 40 16:46:22 16:46:22 1 none ASM:Graph
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 Armadillo|
none|none
none|none
none|none
none|none
StarForce|
none|none
none|none
none|none		 lines=81
none
none
none
none
none
none
none
none		 trace
none
none
none
none
trace
none
none
none
a836ced040
NEW		 none[none] WinXP
Win2K-f		 13 of 41 08:10:57 20:34:52 5 none none:none
 none|none none none
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 14:43:03 20:22:03 5 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace