Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



01 October 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
c89b154681
NEW
d2b40c91a1
NEW
58d02dbffa [0]
fbaa414397[0]
Win2K-f 37 of 41 04:04:41 04:04:41 1 none ASM:Graph
ASM:Graph
StarForce|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
53bfe15e91
NEW
c562e2226d
NEW
1473091351 [0]
none [none]
Win2K-f 1 of 33 19:23:28 19:23:28 1 none ASM:Graph
none:none
tElock|
none|none
lines=75
embedded dns
none
trace
none
379a6daa0d
NEW
1d04d6dc84 [0] Win2K-f 39 of 40 16:08:05 16:08:05 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP 0 of 32 07:58:44 19:27:33 2 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 04:25:44 23:26:09 7 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
57a0c6b729
NEW
none[none] Win2K-f 41 of 43 15:18:33 15:18:33 1 none none:none
none|none none none
1da4193446
NEW
6278c9374a
NEW
8a97c8536a [none]
cc7aaf6ea9[none]
WinXP 37 of 39 20:58:22 20:58:22 1 none none:none
none:none
none|none
none|none
none
none
none
none
a5ceb6c29d
NEW
d64cd9d18b [0] WinXP 40 of 41 20:50:22 20:50:22 1 none ASM:Graph
tElock| 100% lines=42 trace
b502f83a7c
NEW
28f5be93b0 [0] WinXP 32 of 32 02:05:39 12:10:21 4 none ASM:Graph
PolyEnE| 99% lines=73 trace
e6cfefd7ea
NEW
none[none] WinXP 41 of 43 14:24:13 14:24:13 1 none none:none
none|none none none
8887d42f5c
NEW
afaf06d6cd [0] Win2K-f
WinXP
38 of 41 06:54:58 10:17:21 2 none ASM:Graph
pex| 81% lines=42 trace
03f912899b
NEW
none[0] WinXP 32 of 32 17:51:26 17:51:26 1 none none:none
none|none 32% lines=64 trace
4dd4197eb4
NEW
1d04d6dc84 [0] WinXP
Win2K-f
37 of 40 14:20:07 16:20:20 3 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
0d499b2d7b
NEW
none[none] Win2K-f 42 of 43 16:55:03 16:55:03 1 none none:none
none|none none none
50cdd5c6cf
NEW
1d04d6dc84 [0] WinXP 37 of 40 16:47:09 16:47:09 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
3901a3305a
NEW
none[none] Win2K-f 41 of 43 14:28:27 14:28:27 1 none none:none
none|none none none
01c4a6b3eb
NEW
dd524b0259 [0] WinXP 40 of 41 09:48:49 09:48:49 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
5af05bec2e
NEW
ec2138d5b2 [0] Win2K-f 39 of 41 06:42:20 06:42:20 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
0563ea7af7
NEW
7e1532574f
NEW
bc2e11a802 [0]
e6930769d0[0]
WinXP 39 of 41 07:58:33 07:58:33 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=65
embedded dns
lines=91
trace
trace
6704922c65
NEW
1d04d6dc84 [0] WinXP 39 of 41 14:19:25 14:19:25 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
1da4193446
NEW
8a97c8536a [none] WinXP 38 of 40 20:58:22 20:58:22 1 none none:none
none|none none none
ef1952306e
NEW
none[none] WinXP 41 of 43 13:20:33 13:20:33 1 none none:none
none|none none none
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
ab9c4b5f21
NEW
ac7d456668
NEW
afd0915c1a
NEW
d789c8d157
NEW
none[none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
none [none]
5f6572479f[0]
WinXP 31 of 33 08:53:08 08:53:08 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
ASM:Graph
none|none
none|none
none|none
Armadillo|
none|none
none|none
PolyEnE|
95% none
none
none
lines=42
none
none
lines=113
embedded dns
none
none
none
trace
none
none
trace
db03c02347
NEW
none[none] WinXP 40 of 41 09:50:16 09:50:16 1 none none:none
none|none none none
1a2c0e6130
NEW
none[0] WinXP 29 of 29 15:27:08 15:27:08 1 none none:none
none|none 33% lines=60 trace
d8e60db98a
NEW
6991257f56 [0] WinXP 37 of 40 14:09:46 14:09:46 1 none ASM:Graph
pex| 81% lines=42 trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 04:25:44 23:26:09 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
c89b154681
NEW
58d02dbffa [0] Win2K-f 40 of 41 04:04:41 04:04:41 1 none ASM:Graph
StarForce| 96% lines=64
embedded dns
trace
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
ab9c4b5f21
NEW
ac7d456668
NEW
none[none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
Win2K-f
WinXP
14 of 43 06:49:02 08:53:08 2 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
Armadillo|
none|none
none
none
none
lines=42
none
none
none
none
trace
none
03e53fb32a
NEW
none[none] Win2K-f 43 of 43 20:34:23 20:34:23 1 none none:none
none|none none none
8081b6b58c
NEW
none[none] WinXP 40 of 42 13:47:22 13:47:22 1 none none:none
none|none none none
013a5ba10e
NEW
1d04d6dc84 [0] WinXP 40 of 40 20:11:22 20:11:22 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
b35d8ec50e
NEW
none[none] Win2K-f 35 of 36 15:50:28 15:50:28 1 none none:none
none|none none none
0563ea7af7
NEW
bc2e11a802 [0] WinXP 39 of 41 07:58:33 07:58:33 1 none ASM:Graph
tElock| 96% lines=65
embedded dns
trace
7b313206a2
NEW
0c866c8cce [0] WinXP 38 of 41 06:15:52 06:15:52 1 none ASM:Graph
none|none 55% lines=59 trace
ffbb6cbe61
NEW
1d04d6dc84 [0] WinXP 40 of 41 14:11:33 16:23:06 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
ace3787bc2
NEW
none[none] WinXP 42 of 43 14:53:35 14:53:35 1 none none:none
none|none none none
b41e2557c8
NEW
none[none] Win2K-f 40 of 41 15:11:26 15:11:26 1 none none:none
none|none none none
17f4f7fd38
NEW
none[none] Win2K-f 41 of 41 14:16:57 14:16:57 1 none none:none
none|none none none
a677ec43bd
NEW
afd0915c1a
NEW
e1a27921fa
NEW
none[none]
none [none]
none [none]
Win2K-f 40 of 43 06:20:54 06:20:54 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
f534041536
NEW
1d04d6dc84 [0] WinXP
Win2K-f
40 of 41 16:22:14 19:52:13 2 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
72c317205f
NEW
none[none] Win2K-f 40 of 42 15:32:57 15:32:57 1 none none:none
none|none none none
27faa1bee8
NEW
none[none] WinXP 40 of 43 13:08:29 13:08:29 1 none none:none
none|none none none
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
ab9c4b5f21
NEW
ac7d456668
NEW
afd0915c1a
NEW
d789c8d157
NEW
f34ba103d5
NEW
none[none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
none [none]
5f6572479f[0]
none [none]
Win2K-f
WinXP
4 of 42 06:20:54 08:53:08 3 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
Armadillo|
none|none
none|none
PolyEnE|
none|none
none
none
none
lines=42
none
none
lines=113
embedded dns
none
none
none
none
trace
none
none
trace
none
34cbe7a593
NEW
3e83a2d4d7
NEW
d38cb78003 [0]
b97fd63d29[0]
Win2K-f 38 of 41 02:00:26 02:00:26 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
2c19b67965
NEW
34d6e95d5b
NEW
none[none]
none [none]
Win2K-f
WinXP
28 of 43 06:49:02 08:53:08 2 none none:none
none:none
none|none
none|none
none
none
none
none
986b59708d
NEW
none[0] WinXP 29 of 29 09:12:10 23:25:43 3 none none:none
PolyEnE| 100% lines=57 trace
c03793a035
NEW
1d04d6dc84 [0] Win2K-f 41 of 41 14:23:36 14:23:36 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
9bdd2c95b1
NEW
d1bbd693ba [0] WinXP 39 of 41 10:39:50 10:39:50 1 none ASM:Graph
Armadillo| 0% lines=91 trace
22dc0c0b80
NEW
none[none] Win2K-f 39 of 43 05:38:19 05:38:19 1 none none:none
none|none none none
5c6df5141d
NEW
none[none] WinXP 41 of 41 06:33:53 08:34:55 4 none none:none
none|none none none
309898871c
NEW
none[none] WinXP 42 of 43 15:45:56 15:45:56 1 none none:none
none|none none none
9bdd2c95b1
NEW
cd456ac095
NEW
d1bbd693ba [0]
d75caee680[0]
WinXP 39 of 40 10:39:50 10:39:50 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
5818023061
NEW
none[0] WinXP 32 of 32 04:27:21 04:27:21 1 none none:none
PolyEnE| 99% lines=68 trace
fb486908b0
NEW
none[none] WinXP 41 of 43 08:25:27 09:31:43 2 none none:none
none|none none none
29a3030e16
NEW
1d04d6dc84 [0] WinXP 41 of 41 15:40:10 15:40:10 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
a5ceb6c29d
NEW
adadfc0e1c
NEW
d64cd9d18b [0]
0f57439d82[0]
WinXP 38 of 41 20:50:22 20:50:22 1 none ASM:Graph
ASM:Graph
tElock|
tElock|
96% lines=42
lines=64
embedded dns
trace
trace
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
none[none]
none [none]
none [none]
Win2K-f
WinXP
20 of 35 06:49:02 08:53:08 2 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
a677ec43bd
NEW
none[none] Win2K-f 39 of 43 06:20:54 06:20:54 1 none none:none
none|none none none
aad01847fa
NEW
none[none] WinXP 42 of 43 02:10:27 02:43:33 2 none none:none
none|none none none
543e92e51d
NEW
none[none] WinXP 41 of 43 18:35:25 18:35:25 1 none none:none
none|none none none
68b5e580f0
NEW
none[none] Win2K-f 38 of 41 10:31:32 10:31:32 1 none none:none
none|none none none
27faa1bee8
NEW
95305fb0b1
NEW
none[none]
none [none]
WinXP 38 of 42 13:08:29 13:08:29 1 none none:none
none:none
none|none
none|none
none
none
none
none
b68d420d61
NEW
1d04d6dc84 [0] Win2K-f 40 of 41 15:42:05 15:42:05 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
34cbe7a593
NEW
d38cb78003 [0] Win2K-f 36 of 41 02:00:26 02:00:26 1 none ASM:Graph
Armadillo| 0% lines=91 trace
f996bf0275
NEW
1e4ad6cdb1 [0] Win2K-f 38 of 41 14:12:34 14:12:34 1 none ASM:Graph
ASPack| 43% lines=3065
embedded dns
trace
8088cf3c73
NEW
none[none] Win2K-f 41 of 43 18:46:02 18:46:02 1 none none:none
none|none none none
435e5e1bba
NEW
none[none] WinXP 40 of 43 07:10:18 07:10:18 1 none none:none
none|none none none
68b5e580f0
NEW
b475ce7c0b
NEW
none[none]
none [none]
Win2K-f 38 of 41 10:31:32 10:31:32 1 none none:none
none:none
none|none
none|none
none
none
none
none
647430c87b
NEW
none[none] Win2K-f 41 of 43 14:25:52 14:25:52 1 none none:none
none|none none none
46bf358cc3
NEW
afaf06d6cd [0] WinXP 39 of 41 14:40:04 14:40:04 1 none ASM:Graph
pex| 81% lines=42 trace
8128405d8c
NEW
1d04d6dc84 [0] Win2K-f 40 of 41 15:29:22 15:29:22 1 none ASM:Graph
ASPack| 41% lines=3292
embedded dns
trace
7d99b0e910
NEW
none[0] WinXP 26 of 28 01:07:07 23:29:31 3 none none:none
PolyEnE| 99% lines=68 trace
a749b00e15
NEW
none[none] WinXP 39 of 43 05:59:28 05:59:28 1 none none:none
none|none none none
d1377a8b90
NEW
ad56da3672 [0] WinXP 32 of 32 17:01:16 17:01:16 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
ab9c4b5f21
NEW
none[none]
none [none]
none [none]
5fe48b2dcc[0]
WinXP 39 of 41 08:53:08 08:53:08 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
none|none
Armadillo|
0% none
none
none
lines=42
none
none
none
trace
b46489628e
NEW
none[none] WinXP 42 of 43 19:20:42 19:20:42 1 none none:none
none|none none none
2c19b67965
NEW
none[none] Win2K-f
WinXP
26 of 43 06:49:02 08:53:08 2 none none:none
none|none none none
65db8c1d0d
NEW
none[none] WinXP 40 of 40 09:09:31 09:09:31 1 none none:none
none|none none none
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
4bd9563a04
NEW
none[none]
none [none]
none [none]
none [none]
Win2K-f 13 of 42 06:49:02 06:49:02 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
2c19b67965
NEW
34d6e95d5b
NEW
47619862ad
NEW
ab9c4b5f21
NEW
ac7d456668
NEW
afd0915c1a
NEW
none[none]
none [none]
none [none]
5fe48b2dcc[0]
none [none]
none [none]
Win2K-f
WinXP
26 of 43 06:20:54 08:53:08 3 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none|none
none|none
none|none
Armadillo|
none|none
none|none
none
none
none
lines=42
none
none
none
none
none
trace
none
none
d9cb288f31
NEW
45603a001c [0] Win2K-f 3 of 37 08:02:09 18:41:15 3 none ASM:Graph
UPX| 92% lines=174
embedded dns
trace
5af05bec2e
NEW
ff34a1caa4
NEW
ec2138d5b2 [0]
979a6569d4[0]
Win2K-f 39 of 41 06:42:20 06:42:20 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace