Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



30 September 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
b91423b944
NEW
none[none] Win2K-f
WinXP
39 of 40 11:13:57 13:08:01 2 none none:none
none|none none none
2d26223e2f
NEW
none[none] Win2K-f 41 of 41 13:10:10 13:10:10 1 none none:none
none|none none none
471388fe46
NEW
none[none] WinXP 40 of 42 12:51:41 12:51:41 1 none none:none
none|none none none
0629d7fc42
NEW
none[none] Win2K-f 40 of 40 09:21:21 09:21:21 1 none none:none
none|none none none
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP 0 of 32 08:42:34 23:21:12 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
87c037c9e8
NEW
none[none] Win2K-f 42 of 43 12:12:23 12:12:23 1 none none:none
none|none none none
6049c3efc1
NEW
none[none] WinXP 41 of 42 12:49:56 12:49:56 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 08:42:34 23:21:12 11 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
682a384fe9
NEW
none[3] Win2K-f 31 of 41 14:18:44 14:18:44 1 none none:none
none|none none trace
71e6f60517
NEW
ab4e3226c4
NEW
1ef1781501 [0]
c2d0313e73[0]
Win2K-f 40 of 41 21:34:53 21:34:53 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=91
none
trace
trace
17bc59fcd3
NEW
20537a9457
NEW
none[none]
none [none]
Win2K-f 40 of 42 01:40:55 01:40:55 1 none none:none
none:none
none|none
none|none
none
none
none
none
270559591a
NEW
b3ae886db6
NEW
none[none]
none [none]
WinXP 38 of 41 20:34:41 20:34:41 1 none none:none
none:none
none|none
none|none
none
none
none
none
1b3d8e9fe7
NEW
1d04d6dc84 [0] Win2K-f 39 of 41 12:47:50 14:05:39 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
b502f83a7c
NEW
28f5be93b0 [0] WinXP 32 of 32 22:01:01 23:29:08 2 none ASM:Graph
PolyEnE| 99% lines=73 trace
a73c16ccd0
NEW
5568131b79 [0] WinXP 29 of 29 05:14:19 05:14:19 1 none ASM:Graph
none|none 30% lines=63 trace
168aab35a3
NEW
60b730b97e [0] WinXP 31 of 33 04:32:32 04:32:32 1 none ASM:Graph
tElock| 95% lines=120
embedded dns
trace
8887d42f5c
NEW
afaf06d6cd [0] WinXP 38 of 41 20:14:36 20:14:36 1 none ASM:Graph
pex| 81% lines=42 trace
bca9e0fb5f
NEW
1d6b20137d [0] Win2K-f 31 of 32 11:43:13 11:43:13 1 none ASM:Graph
PolyEnE| 96% lines=64
embedded dns
trace
533d15b5ce
NEW
c67adf46e2 [0] Win2K-f 30 of 33 07:23:55 07:23:55 1 none ASM:Graph
tElock| 96% lines=126
embedded dns
trace
3ae841bfda
NEW
none[none] WinXP 37 of 39 11:31:02 11:31:02 1 none none:none
none|none none none
4dd4197eb4
NEW
1d04d6dc84 [0] Win2K-f 37 of 40 12:04:47 12:04:47 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
29f397698f
NEW
none[none] WinXP 39 of 41 09:44:55 09:44:55 1 none none:none
none|none none none
e25842bcd6
NEW
none[none] Win2K-f 41 of 41 09:53:04 09:53:04 1 none none:none
none|none none none
0d499b2d7b
NEW
none[none] WinXP 42 of 43 13:54:46 13:54:46 1 none none:none
none|none none none
6770a90b2d
NEW
none[none] WinXP 41 of 42 10:29:59 10:29:59 1 none none:none
none|none none none
3f7ae0a64b
NEW
none[none] Win2K-f 37 of 43 10:40:59 10:40:59 1 none none:none
none|none none none
01c4a6b3eb
NEW
dd524b0259 [0] WinXP 40 of 41 13:55:54 13:55:54 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
1e12f5145a
NEW
f208493e65
NEW
617af909de [0]
5100adb4f9[0]
WinXP 40 of 41 15:58:39 15:58:39 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
a8c7b1bcff
NEW
none[none] Win2K-f 41 of 42 15:10:09 15:10:09 1 none none:none
none|none none none
a7894c0618
NEW
eb152d57cb
NEW
none[none]
none [none]
Win2K-f 39 of 43 01:02:44 01:02:44 1 none none:none
none:none
none|none
none|none
none
none
none
none
533d15b5ce
NEW
58c343a8d8
NEW
c67adf46e2 [0]
none [0]
Win2K-f 28 of 33 07:23:55 07:23:55 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=126
embedded dns
lines=91
trace
trace
bedf29b824
NEW
1e4ad6cdb1 [0] Win2K-f 40 of 41 09:16:57 09:16:57 1 none ASM:Graph
ASPack| 43% lines=3065
embedded dns
trace
c473a72583
NEW
1d04d6dc84 [0] WinXP
Win2K-f
35 of 40 09:13:45 12:43:32 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
80659b2686
NEW
none[none] WinXP 39 of 42 13:19:10 13:19:10 1 none none:none
none|none none none
65e302400b
NEW
73c8396e88
NEW
ab9c4b5f21
NEW
d789c8d157
NEW
none[none]
none [none]
5fe48b2dcc[0]
5f6572479f[0]
WinXP 31 of 33 00:39:49 00:39:49 1 none none:none
none:none
ASM:Graph
ASM:Graph
none|none
none|none
Armadillo|
PolyEnE|
95% none
none
lines=42
lines=113
embedded dns
none
none
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
Win2K-f 0 of 33 03:24:18 10:46:04 3 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
71e6f60517
NEW
1ef1781501 [0] Win2K-f 40 of 41 21:34:53 21:34:53 1 none ASM:Graph
Armadillo| 0% lines=91 trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 33 11:40:14 19:16:19 5 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
65e302400b
NEW
none[none] WinXP 18 of 43 00:39:49 00:39:49 1 none none:none
none|none none none
1e12f5145a
NEW
617af909de [0] WinXP 39 of 41 15:58:39 15:58:39 1 none ASM:Graph
Armadillo| 0% lines=91 trace
1d0ce31c6d
NEW
none[none] WinXP 40 of 41 06:06:00 06:06:00 1 none none:none
none|none none none
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 03:27:09 09:31:29 3 none ASM:Graph
PolyEnE| 100% lines=73 trace
e3faefa56a
NEW
1d04d6dc84 [0] WinXP 40 of 41 09:38:05 10:08:15 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
168aab35a3
NEW
2c19b67965
NEW
34d6e95d5b
NEW
aa6d257461
NEW
ac7d456668
NEW
60b730b97e [0]
none [none]
none [none]
6aca567868[0]
none [none]
WinXP 14 of 43 04:32:32 04:32:32 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
tElock|
none|none
none|none
Armadillo|
none|none
lines=120
embedded dns
none
none
lines=91
none
trace
none
none
trace
none
687eb47a37
NEW
none[none] Win2K-f 41 of 42 12:12:45 12:12:45 1 none none:none
none|none none none
531a598a70
NEW
none[none] WinXP 40 of 43 10:13:32 10:13:32 1 none none:none
none|none none none
c13a6c3da5
NEW
1d04d6dc84 [0] Win2K-f 40 of 41 11:19:43 11:19:43 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
ffbb6cbe61
NEW
1d04d6dc84 [0] Win2K-f 40 of 41 14:52:36 14:52:36 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
acdacd69d6
NEW
none[none] WinXP 40 of 43 01:25:20 01:25:20 1 none none:none
none|none none none
9363d60262
NEW
1d04d6dc84 [0] Win2K-f 36 of 40 14:30:41 14:30:41 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
c23a910a12
NEW
none[none] Win2K-f 41 of 43 13:15:25 13:15:25 1 none none:none
none|none none none
25be4ab6cf
NEW
none[none] WinXP 40 of 42 19:33:38 19:33:38 1 none none:none
none|none none none
168aab35a3
NEW
2c19b67965
NEW
34d6e95d5b
NEW
aa6d257461
NEW
60b730b97e [0]
none [none]
none [none]
6aca567868[0]
WinXP 39 of 41 04:32:32 04:32:32 1 none ASM:Graph
none:none
none:none
ASM:Graph
tElock|
none|none
none|none
Armadillo|
0% lines=120
embedded dns
none
none
lines=91
trace
none
none
trace
49c5a946bf
NEW
none[none] WinXP 42 of 43 09:14:29 09:14:29 1 none none:none
none|none none none
f534041536
NEW
1d04d6dc84 [0] WinXP
Win2K-f
40 of 41 09:16:44 19:42:39 3 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
df17a625ee
NEW
none[0] WinXP 29 of 29 06:17:28 06:17:28 1 none none:none
ASPack| 72% lines=298
embedded dns
trace
168aab35a3
NEW
2c19b67965
NEW
34d6e95d5b
NEW
aa6d257461
NEW
ac7d456668
NEW
afd0915c1a
NEW
f34ba103d5
NEW
60b730b97e [0]
none [none]
none [none]
6aca567868[0]
none [none]
none [none]
none [none]
WinXP 4 of 42 04:32:32 04:32:32 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
none:none
none:none
tElock|
none|none
none|none
Armadillo|
none|none
none|none
none|none
lines=120
embedded dns
none
none
lines=91
none
none
none
trace
none
none
trace
none
none
none
168aab35a3
NEW
2c19b67965
NEW
34d6e95d5b
NEW
60b730b97e [0]
none [none]
none [none]
WinXP 28 of 43 04:32:32 04:32:32 1 none ASM:Graph
none:none
none:none
tElock|
none|none
none|none
lines=120
embedded dns
none
none
trace
none
none
986b59708d
NEW
none[0] WinXP 29 of 29 01:53:44 18:47:01 3 none none:none
PolyEnE| 100% lines=57 trace
3f350b87ce
NEW
none[none] Win2K-f 38 of 42 10:41:56 10:41:56 1 none none:none
none|none none none
bca9e0fb5f
NEW
e53a9ea82e
NEW
1d6b20137d [0]
none [0]
Win2K-f 23 of 33 11:43:13 11:43:13 1 none ASM:Graph
none:none
PolyEnE|
Armadillo|
0% lines=64
embedded dns
lines=90
trace
trace
5c6df5141d
NEW
none[none] WinXP 41 of 41 07:53:48 12:08:16 2 none none:none
none|none none none
c45a01fbcc
NEW
afaf06d6cd [0] Win2K-f 39 of 41 14:49:58 16:21:30 2 none ASM:Graph
pex| 81% lines=42 trace
c19c8a2776
NEW
none[none] WinXP 42 of 43 08:34:01 08:34:01 1 none none:none
none|none none none
25be4ab6cf
NEW
c47649a89f
NEW
none[none]
none [none]
WinXP 40 of 41 19:33:38 19:33:38 1 none none:none
none:none
none|none
none|none
none
none
none
none
29a3030e16
NEW
1d04d6dc84 [0] WinXP 41 of 41 10:17:30 10:17:30 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
9716d7995a
NEW
c3a5354b6f [0] WinXP 35 of 35 17:49:08 17:49:08 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
8e015d66f3
NEW
none[none] WinXP 31 of 43 23:10:55 23:10:55 1 none none:none
none|none none none
17bc59fcd3
NEW
none[none] Win2K-f 41 of 43 01:40:55 01:40:55 1 none none:none
none|none none none
4d91db06f4
NEW
67419c8838 [0] WinXP 39 of 42 15:03:42 15:03:42 1 none none:none
Armadillo| none trace
c90e8eb08a
NEW
none[none] Win2K-f 39 of 43 09:50:19 09:50:19 1 none none:none
none|none none none
c46f4552da
NEW
ce6ff736cf [0] WinXP 42 of 42 17:07:14 17:07:14 1 none none:none
none|none none trace
b68d420d61
NEW
1d04d6dc84 [0] Win2K-f
WinXP
40 of 41 09:18:49 10:10:00 3 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
f996bf0275
NEW
1e4ad6cdb1 [0] Win2K-f 38 of 41 09:14:22 09:14:22 1 none ASM:Graph
ASPack| 43% lines=3065
embedded dns
trace
7d7da21a34
NEW
none[none] WinXP 41 of 43 03:09:58 03:09:58 1 none none:none
none|none none none
8128405d8c
NEW
1d04d6dc84 [0] Win2K-f
WinXP
40 of 41 09:55:52 10:47:07 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
46bf358cc3
NEW
afaf06d6cd [0] Win2K-f 39 of 41 13:53:51 13:53:51 1 none ASM:Graph
pex| 81% lines=42 trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 03:18:46 22:53:07 6 none none:none
PolyEnE| 99% lines=68 trace
65e302400b
NEW
73c8396e88
NEW
none[none]
none [none]
WinXP 13 of 43 00:39:49 00:39:49 1 none none:none
none:none
none|none
none|none
none
none
none
none
4d91db06f4
NEW
80ad2a0006
NEW
67419c8838 [0]
06729732e0[0]
WinXP 41 of 42 15:03:42 15:03:42 1 none none:none
none:none
Armadillo|
tElock|
none
none
trace
trace
a7894c0618
NEW
none[none] Win2K-f 40 of 43 01:02:44 01:02:44 1 none none:none
none|none none none
65e302400b
NEW
73c8396e88
NEW
ab9c4b5f21
NEW
none[none]
none [none]
5fe48b2dcc[0]
WinXP 39 of 41 00:39:49 00:39:49 1 none none:none
none:none
ASM:Graph
none|none
none|none
Armadillo|
0% none
none
lines=42
none
none
trace
270559591a
NEW
none[none] WinXP 38 of 41 20:34:41 20:34:41 1 none none:none
none|none none none
065bfd0d85
NEW
none[none] Win2K-f 42 of 43 19:11:00 19:11:00 1 none none:none
none|none none none
70ec5c4b3f
NEW
f697adabdd [0] Win2K-f 39 of 40 06:03:26 06:03:26 1 none none:none
StarForce| none trace
65db8c1d0d
NEW
none[none] WinXP 40 of 40 17:46:11 17:46:11 1 none none:none
none|none none none
168aab35a3
NEW
2c19b67965
NEW
60b730b97e [0]
none [none]
WinXP 26 of 43 04:32:32 04:32:32 1 none ASM:Graph
none:none
tElock|
none|none
lines=120
embedded dns
none
trace
none
168aab35a3
NEW
2c19b67965
NEW
34d6e95d5b
NEW
aa6d257461
NEW
ac7d456668
NEW
afd0915c1a
NEW
60b730b97e [0]
none [none]
none [none]
6aca567868[0]
none [none]
none [none]
WinXP 26 of 43 04:32:32 04:32:32 1 none ASM:Graph
none:none
none:none
ASM:Graph
none:none
none:none
tElock|
none|none
none|none
Armadillo|
none|none
none|none
lines=120
embedded dns
none
none
lines=91
none
none
trace
none
none
trace
none
none