Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

28 May 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

24137d8412
NEW 73a916deb4 [0] WinXP 31 of 32 02:10:29 02:10:29 1 none none:none
PolyEnE| none trace

53bfe15e91
NEW
73f1082158
NEW 1473091351 [0]
none [0] Win2K-f
WinXP 0 of 32 06:59:11 22:37:00 4 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

93609d0769
NEW none[none] Win2K-f 38 of 40 05:54:32 05:54:32 1 none none:none
none|none none none

14f47ffd1e
NEW 90bf4b99ff [0] WinXP 40 of 41 09:04:28 09:04:28 1 none ASM:Graph
tElock| 96% lines=56
embedded dns trace

53bfe15e91
NEW 1473091351 [0] Win2K-f
WinXP 33 of 33 06:59:11 22:37:00 8 none ASM:Graph
tElock| 96% lines=75
embedded dns trace

5bbb57c115
NEW 03e5cb3c4a [0] Win2K-f 39 of 41 19:34:25 19:34:25 1 none ASM:Graph
Armadillo| 0% lines=91 trace

07fabc79ef
NEW none[0] WinXP 0 of 32 15:49:52 15:49:52 1 none none:none
Armadillo| 0% lines=90 trace

5799ab6538
NEW 2713679411 [0] Win2K-f 40 of 41 23:57:26 23:57:26 1 none ASM:Graph
tElock| 96% lines=64
embedded dns trace

6b315f5dbc
NEW
7938865f8c
NEW 7604b94520 [0]
a9b9e4904b[0] Win2K-f 39 of 41 06:08:58 06:08:58 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo| 0% lines=64
embedded dns
lines=91 trace
trace

5bbb57c115
NEW
75ac189d9e
NEW 03e5cb3c4a [0]
705dbaa801[0] Win2K-f 39 of 41 19:34:25 19:34:25 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock| 96% lines=91
lines=64
embedded dns trace
trace

5c6df5141d
NEW none[none] WinXP 41 of 41 13:08:58 13:08:58 1 none none:none
none|none none none

912a073945
NEW 7874c7f21e [0] WinXP 39 of 41 11:33:10 18:17:01 2 none ASM:Graph
PolyEnE| 100% lines=68 trace

6a6aaa5b73
NEW
8bde6dd126
NEW 63889c9976 [0]
885c68f500[0] Win2K-f 40 of 41 04:19:25 04:19:25 1 none ASM:Graph
ASM:Graph
tElock|
tElock| 96% lines=42
lines=64
embedded dns trace
trace

6a6aaa5b73
NEW 63889c9976 [0] Win2K-f 39 of 40 04:19:25 04:19:25 1 none ASM:Graph
tElock| 100% lines=42 trace

7552be3fb7
NEW none[3] Win2K-f 30 of 41 04:05:10 04:05:10 1 none none:none
none|none none trace

6b315f5dbc
NEW 7604b94520 [0] Win2K-f 39 of 41 06:08:58 06:08:58 1 none ASM:Graph
tElock| 96% lines=64
embedded dns trace

4e6c4dd8b1
NEW none[3] Win2K-f 4 of 37 21:16:03 21:24:56 2 none none:none
StarForce| none trace

409ef22885
NEW none[3] Win2K-f 2 of 37 22:25:56 22:25:56 1 none none:none
UPX| none trace

7f60162c2c
NEW none[0] WinXP 25 of 25 09:51:19 09:51:19 1 none none:none
PolyEnE| 100% lines=93
embedded dns trace

5fae5f1583
NEW none[none] Win2K-f 40 of 41 09:43:16 09:43:16 1 none none:none
none|none none none

aa298099d5
NEW none[0] WinXP 29 of 29 05:13:54 05:13:54 1 none none:none
PolyEnE| 99% lines=68 trace

4180c19d91
NEW
b6e91e001c
NEW 9f3f2de385 [0]
d2275a6cf5[0] WinXP 38 of 41 14:25:03 14:25:03 1 none ASM:Graph
ASM:Graph
Armadillo|
PolyEnE| 96% lines=91
lines=64
embedded dns trace
trace

3ae357d17b
NEW none[0] WinXP 29 of 29 05:34:18 05:34:18 1 none none:none
PolyEnE| 99% lines=73 trace

58256fd29e
NEW none[3] Win2K-f 6 of 37 15:15:37 15:15:37 1 none none:none
UPX| none trace

7d99b0e910
NEW none[0] WinXP 26 of 28 12:42:23 17:31:03 3 none none:none
PolyEnE| 99% lines=68 trace

7c7d5bd68d
NEW 25c505d17c [0] WinXP 37 of 41 22:47:59 22:47:59 1 none ASM:Graph
StarForce| 98% lines=546 trace

53bfe15e91
NEW
57ce4acac2
NEW 1473091351 [0]
none [0] WinXP 0 of 33 08:02:22 08:02:22 1 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

5fae5f1583
NEW
a3395c110a
NEW none[none]
none [none] Win2K-f 40 of 41 09:43:16 09:43:16 1 none none:none
none:none
none|none
none|none none
none none
none

4f88618d4f
NEW none[3] Win2K-f 8 of 37 10:59:10 11:07:52 2 none none:none
UPX| none trace

14f47ffd1e
NEW
50437008d9
NEW 90bf4b99ff [0]
c1b09ac5d7[0] WinXP 5 of 41 09:04:28 09:04:28 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo| 0% lines=56
embedded dns
lines=90 trace
trace

53bfe15e91
NEW
a08f3b74a4
NEW 1473091351 [0]
none [0] Win2K-f
WinXP 0 of 33 16:47:01 17:36:20 2 none ASM:Graph
none:none
tElock|
Armadillo| 0% lines=75
embedded dns
lines=90 trace
trace

7587773eea
NEW none[3] Win2K-f 7 of 37 14:48:16 14:48:16 1 none none:none
StarForce| none trace

1d0ce31c6d
NEW none[none] WinXP 40 of 41 09:07:54 09:07:54 1 none none:none
none|none none none

d8040f84d4
NEW d683995e84 [0] WinXP 39 of 41 07:36:24 07:36:24 1 none ASM:Graph
PolyEnE| 100% lines=73 trace

d51fe583c4
NEW none[none] WinXP 41 of 41 22:55:53 22:55:53 1 none none:none
none|none none none

4180c19d91
NEW 9f3f2de385 [0] WinXP 37 of 41 14:25:03 14:25:03 1 none ASM:Graph
Armadillo| 0% lines=91 trace

5285741560
NEW 60590b8b67 [0] WinXP 37 of 40 16:55:05 16:55:05 1 none ASM:Graph
none|none 55% lines=59 trace

74ca348885
NEW 8b0bf5ec45 [0] WinXP
Win2K-f 39 of 41 07:29:22 20:00:18 2 none ASM:Graph
none|none 98% lines=546 trace

5799ab6538
NEW
f38e8d97da
NEW 2713679411 [0]
83f1400243[0] Win2K-f 39 of 41 23:57:26 23:57:26 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo| 0% lines=64
embedded dns
lines=91 trace
trace

d9cb288f31
NEW 45603a001c [0] Win2K-f 3 of 37 01:27:38 15:28:41 3 none ASM:Graph
UPX| 92% lines=174
embedded dns trace