Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



30 April 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
10759405e0
NEW
292d343248 [0] Win2K-f 38 of 41 07:40:53 07:40:53 1 none ASM:Graph
Armadillo| 0% lines=91 trace
1b24596974
NEW
none[none] WinXP 36 of 41 16:28:17 16:28:17 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] WinXP 33 of 33 09:39:58 09:39:58 1 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
867e541f7a
NEW
8a75955033
NEW
9276c8b36b
NEW
none[none]
2bf3e548b9[0]
none [0]
Win2K-f 28 of 32 03:02:32 03:02:32 1 none none:none
ASM:Graph
none:none
none|none
tElock|
Armadillo|
0% none
lines=126
embedded dns
lines=90
none
trace
trace
5bbb57c115
NEW
03e5cb3c4a [0] Win2K-f 39 of 41 22:59:36 22:59:36 1 none ASM:Graph
Armadillo| 0% lines=91 trace
1f6a957032
NEW
6a4845ca11
NEW
none[none]
c23d00870b[0]
Win2K-f 0 of 0 10:36:34 10:36:34 1 none none:none
ASM:Graph
none|none
tElock|
95% none
lines=120
embedded dns
none
trace
1f6a957032
NEW
6a4845ca11
NEW
b934aead39
NEW
ba3d3d9961
NEW
none[none]
c23d00870b[0]
none [none]
none [none]
Win2K-f 19 of 41 06:36:23 10:36:34 2 none none:none
ASM:Graph
none:none
none:none
none|none
tElock|
none|none
none|none
none
lines=120
embedded dns
none
none
none
trace
none
none
867e541f7a
NEW
none[none] Win2K-f 25 of 40 03:02:32 03:02:32 1 none none:none
none|none none none
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
5f495d60da
NEW
b934aead39
NEW
ba3d3d9961
NEW
c9e89abb7b
NEW
e8aa8b4282
NEW
none[none]
none [none]
none [none]
c67adf46e2[0]
none [0]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 15 of 41 06:36:23 06:36:23 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none|none
none|none
none|none
none|none
none
none
none
lines=126
embedded dns
lines=91
none
none
none
none
none
none
none
none
trace
trace
none
none
none
none
none
5bbb57c115
NEW
75ac189d9e
NEW
03e5cb3c4a [0]
705dbaa801[0]
Win2K-f 39 of 41 22:59:36 22:59:36 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
47d3548e36
NEW
d8722af110
NEW
ab13346633 [0]
ab30a55931[0]
Win2K-f 36 of 40 04:24:44 04:24:44 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
73ce2b74da
NEW
none[0] Win2K-f 3 of 33 19:16:02 19:16:02 1 none none:none
Armadillo| 0% lines=90 trace
867e541f7a
NEW
8a75955033
NEW
9276c8b36b
NEW
b934aead39
NEW
d1627e0de8
NEW
none[none]
2bf3e548b9[0]
none [0]
none [none]
none [none]
Win2K-f 19 of 41 03:02:32 03:02:32 1 none none:none
ASM:Graph
none:none
none:none
none:none
none|none
tElock|
Armadillo|
none|none
none|none
none
lines=126
embedded dns
lines=90
none
none
none
trace
trace
none
none
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
533d15b5ce
NEW
none[none]
none [none]
none [none]
c67adf46e2[0]
Win2K-f 30 of 33 06:36:23 06:36:23 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
none|none
tElock|
96% none
none
none
lines=126
embedded dns
none
none
none
trace
1f6a957032
NEW
6a4845ca11
NEW
b934aead39
NEW
ba3d3d9961
NEW
ffafd341d9
NEW
none[none]
c23d00870b[0]
none [none]
none [none]
294fb27545[0]
Win2K-f 38 of 40 10:36:34 10:36:34 1 none none:none
ASM:Graph
none:none
none:none
ASM:Graph
none|none
tElock|
none|none
none|none
Armadillo|
0% none
lines=120
embedded dns
none
none
lines=91
none
trace
none
none
trace
0b951c2832
NEW
5fe761661a [0] WinXP 32 of 36 10:42:51 10:42:51 1 none ASM:Graph
Armadillo| 0% lines=91 trace
867e541f7a
NEW
8a75955033
NEW
none[none]
2bf3e548b9[0]
Win2K-f 29 of 32 03:02:32 03:02:32 1 none none:none
ASM:Graph
none|none
tElock|
96% none
lines=126
embedded dns
none
trace
330a5d96da
NEW
none[none] WinXP 40 of 41 05:40:21 05:40:21 1 none none:none
none|none none none
741e3b03b3
NEW
none[0] WinXP 31 of 32 00:08:02 00:08:02 1 none none:none
none|none 32% lines=61 trace
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
none[none]
none [none]
none [none]
Win2K-f 25 of 41 06:36:23 06:36:23 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
21a46d6783
NEW
none[none] Win2K-f 18 of 41 03:54:53 06:36:23 2 none none:none
none|none none none
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
none[none]
none [none]
none [none]
c67adf46e2[0]
none [0]
Win2K-f 28 of 33 06:36:23 06:36:23 1 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
tElock|
Armadillo|
0% none
none
none
lines=126
embedded dns
lines=91
none
none
none
trace
trace
47d3548e36
NEW
ab13346633 [0] Win2K-f 37 of 41 04:24:44 21:30:46 2 none ASM:Graph
Armadillo| 0% lines=91 trace
73ce2b74da
NEW
79c01ec060
NEW
none[0]
1bfd34056c[0]
Win2K-f 33 of 33 19:16:02 19:16:02 1 none none:none
ASM:Graph
Armadillo|
tElock|
96% lines=90
lines=64
embedded dns
trace
trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 19:06:34 21:02:47 4 none none:none
PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW
292d343248 [0]
854c49d8c4[0]
Win2K-f 39 of 41 07:40:53 07:40:53 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
d1377a8b90
NEW
ad56da3672 [0] WinXP 32 of 32 07:31:15 07:31:15 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
474acf88e5
NEW
1f53944b24 [0] WinXP 38 of 40 13:19:33 13:19:33 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
WinXP 0 of 33 09:39:58 09:39:58 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
5f495d60da
NEW
none[none]
none [none]
none [none]
c67adf46e2[0]
none [0]
none [none]
Win2K-f 0 of 40 06:36:23 06:36:23 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none
none
none
lines=126
embedded dns
lines=91
none
none
none
none
trace
trace
none
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 20:01:06 20:01:06 1 none ASM:Graph
PolyEnE| 100% lines=73 trace
474acf88e5
NEW
68f0c14692
NEW
1f53944b24 [0]
ccc1b24d53[0]
WinXP 38 of 40 13:19:33 13:19:33 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
21a46d6783
NEW
245bef199a
NEW
2d1ab85f2b
NEW
533d15b5ce
NEW
58c343a8d8
NEW
5f495d60da
NEW
b934aead39
NEW
ba3d3d9961
NEW
c9e89abb7b
NEW
none[none]
none [none]
none [none]
c67adf46e2[0]
none [0]
none [none]
none [none]
none [none]
none [none]
Win2K-f 11 of 41 06:36:23 06:36:23 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
tElock|
Armadillo|
none|none
none|none
none|none
none|none
none
none
none
lines=126
embedded dns
lines=91
none
none
none
none
none
none
none
trace
trace
none
none
none
none
8ef3f9fd36
NEW
1c396012a3 [0] Win2K-f 38 of 41 23:13:00 23:13:00 1 none ASM:Graph
none|none 98% lines=546 trace
0b951c2832
NEW
e4ed4df0f0
NEW
5fe761661a [0]
de471fc380[0]
WinXP 34 of 36 10:42:51 10:42:51 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
0c01728b7e
NEW
none[none] Win2K-f 36 of 36 22:26:58 22:26:58 1 none none:none
none|none none none
21a46d6783
NEW
245bef199a
NEW
none[none]
none [none]
Win2K-f 24 of 41 06:36:23 06:36:23 1 none none:none
none:none
none|none
none|none
none
none
none
none
1f6a957032
NEW
6a4845ca11
NEW
b934aead39
NEW
none[none]
c23d00870b[0]
none [none]
Win2K-f 29 of 41 03:02:32 10:36:34 3 none none:none
ASM:Graph
none:none
none|none
tElock|
none|none
none
lines=120
embedded dns
none
none
trace
none
1f6a957032
NEW
none[none] Win2K-f 16 of 40 10:36:34 10:36:34 1 none none:none
none|none none none