Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



15 September 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 32 09:21:27 19:07:19 3 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
377ae8c2fd
NEW
none[none] Win2K-f 40 of 42 15:33:51 15:33:51 1 none none:none
none|none none none
cf346981b5
NEW
2eb6c94f0a [0] WinXP 40 of 41 04:31:18 04:31:18 1 none ASM:Graph
PolyEnE| 100% lines=73 trace
14f47ffd1e
NEW
90bf4b99ff [0] Win2K-f 40 of 41 11:03:24 11:03:24 1 none ASM:Graph
tElock| 96% lines=56
embedded dns
trace
53bfe15e91
NEW
1473091351 [0] Win2K-f 33 of 33 03:01:35 22:49:24 10 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
5bbb57c115
NEW
03e5cb3c4a [0] Win2K-f 39 of 41 05:29:34 05:29:34 1 none ASM:Graph
Armadillo| 0% lines=91 trace
761a66b891
NEW
b469dac5dc [0] Win2K-f 38 of 41 01:09:52 01:09:52 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
bc3e2bb76d
NEW
none[none] WinXP 40 of 43 08:30:48 08:30:48 1 none none:none
none|none none none
377ae8c2fd
NEW
7cfdf42414
NEW
none[none]
none [none]
Win2K-f 40 of 42 15:33:51 15:33:51 1 none none:none
none:none
none|none
none|none
none
none
none
none
48537b2ba5
NEW
none[none] WinXP 42 of 43 04:25:14 04:25:14 1 none none:none
none|none none none
7549900329
NEW
4b13f1921b [0] Win2K-f 41 of 42 15:56:24 15:56:24 1 none none:none
tElock| none trace
5bbb57c115
NEW
75ac189d9e
NEW
03e5cb3c4a [0]
705dbaa801[0]
Win2K-f 39 of 41 05:29:34 05:29:34 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
38ed850a0e
NEW
46990f37cd [0] Win2K-f
WinXP
34 of 38 01:24:47 04:18:35 2 none ASM:Graph
Armadillo| 0% lines=91 trace
b76c839fa8
NEW
none[none] Win2K-f 7 of 43 16:58:12 16:58:12 1 none none:none
none|none none none
0b951c2832
NEW
5fe761661a [0] WinXP 32 of 36 20:00:08 20:00:08 1 none ASM:Graph
Armadillo| 0% lines=91 trace
03f912899b
NEW
none[0] WinXP 32 of 32 18:48:45 18:48:45 1 none none:none
none|none 32% lines=64 trace
761a66b891
NEW
98d05c039b
NEW
b469dac5dc [0]
none [none]
Win2K-f 38 of 41 01:09:52 01:09:52 1 none ASM:Graph
none:none
tElock|
none|none
lines=64
embedded dns
none
trace
none
aad01847fa
NEW
none[none] WinXP 42 of 43 16:36:29 16:36:29 1 none none:none
none|none none none
7549900329
NEW
b71514f095
NEW
4b13f1921b [0]
f6aa3689d1[0]
Win2K-f 40 of 42 15:56:24 15:56:24 1 none none:none
none:none
tElock|
Armadillo|
none
none
trace
trace
43b8f21924
NEW
none[3] WinXP 32 of 41 23:01:09 23:01:09 1 none none:none
none|none none trace
741e3b03b3
NEW
none[0] WinXP 31 of 32 21:00:02 21:00:02 1 none none:none
none|none 32% lines=61 trace
c46f4552da
NEW
ce6ff736cf [0] WinXP 42 of 42 11:33:16 11:33:16 1 none none:none
none|none none trace
ee64c59318
NEW
b2cd748f5d [0] WinXP 39 of 41 03:20:00 03:20:00 1 none ASM:Graph
none|none 98% lines=546 trace
d08635ca20
NEW
none[none] Win2K-f 40 of 41 19:08:01 19:08:01 1 none none:none
none|none none none
4180c19d91
NEW
b6e91e001c
NEW
9f3f2de385 [0]
d2275a6cf5[0]
Win2K-f 38 of 41 02:01:25 12:24:22 2 none ASM:Graph
ASM:Graph
Armadillo|
PolyEnE|
96% lines=91
lines=64
embedded dns
trace
trace
3ae357d17b
NEW
none[0] WinXP 29 of 29 13:44:57 13:44:57 1 none none:none
PolyEnE| 99% lines=73 trace
cfc736766e
NEW
none[none] WinXP 39 of 43 05:08:20 05:08:20 1 none none:none
none|none none none
7d99b0e910
NEW
none[0] WinXP 26 of 28 01:24:27 15:11:21 4 none none:none
PolyEnE| 99% lines=68 trace
65e302400b
NEW
901fde8bf5
NEW
ab9c4b5f21
NEW
d789c8d157
NEW
none[none]
none [none]
5fe48b2dcc[0]
5f6572479f[0]
Win2K-f 31 of 33 16:25:37 16:25:37 1 none none:none
none:none
ASM:Graph
ASM:Graph
none|none
none|none
Armadillo|
PolyEnE|
95% none
none
lines=42
lines=113
embedded dns
none
none
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 03:01:35 03:01:35 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
1a2c0e6130
NEW
none[0] WinXP 29 of 29 05:34:39 22:25:16 3 none none:none
none|none 33% lines=60 trace
14f47ffd1e
NEW
50437008d9
NEW
90bf4b99ff [0]
c1b09ac5d7[0]
Win2K-f 5 of 41 11:03:24 11:03:24 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=56
embedded dns
lines=90
trace
trace
ce53ef9b02
NEW
none[none] Win2K-f 43 of 43 05:06:07 05:06:07 1 none none:none
none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 04:46:41 22:49:24 6 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
65e302400b
NEW
none[none] Win2K-f 18 of 43 16:25:37 16:25:37 1 none none:none
none|none none none
d20f157117
NEW
738f555183 [0] WinXP 34 of 34 11:49:11 11:49:11 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
65e302400b
NEW
901fde8bf5
NEW
ab9c4b5f21
NEW
none[none]
none [none]
5fe48b2dcc[0]
Win2K-f 39 of 41 16:25:37 16:25:37 1 none none:none
none:none
ASM:Graph
none|none
none|none
Armadillo|
0% none
none
lines=42
none
none
trace
d1d34f8be5
NEW
none[none] WinXP 42 of 43 02:51:45 02:51:45 1 none none:none
none|none none none
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 06:13:27 20:49:12 4 none ASM:Graph
PolyEnE| 100% lines=73 trace
d08635ca20
NEW
e2479cbb98
NEW
none[none]
none [none]
Win2K-f 39 of 40 19:08:01 19:08:01 1 none none:none
none:none
none|none
none|none
none
none
none
none
b46489628e
NEW
none[none] WinXP 42 of 43 18:39:17 18:39:17 1 none none:none
none|none none none
38ed850a0e
NEW
b9297745a1
NEW
46990f37cd [0]
4294884d84[0]
Win2K-f
WinXP
35 of 38 01:24:47 04:18:35 2 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
70ec5c4b3f
NEW
f697adabdd [0] WinXP 39 of 40 07:00:21 07:00:21 1 none none:none
StarForce| none trace
0b951c2832
NEW
e4ed4df0f0
NEW
5fe761661a [0]
de471fc380[0]
WinXP 34 of 36 20:00:08 20:00:08 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
65e302400b
NEW
901fde8bf5
NEW
none[none]
none [none]
Win2K-f 16 of 43 16:25:37 16:25:37 1 none none:none
none:none
none|none
none|none
none
none
none
none
4180c19d91
NEW
9f3f2de385 [0] Win2K-f 37 of 41 02:01:25 12:24:22 2 none ASM:Graph
Armadillo| 0% lines=91 trace
9783554cde
NEW
none[none] Win2K-f 43 of 43 08:14:16 08:14:16 1 none none:none
none|none none none
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 00:28:49 10:30:03 4 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace