Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



17 October 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
c89b154681
NEW
d2b40c91a1
NEW
58d02dbffa [0]
fbaa414397[0]
Win2K-f 37 of 41 05:02:23 05:02:23 1 none ASM:Graph
ASM:Graph
StarForce|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
84821fbed6
NEW
none[none] WinXP 42 of 43 20:22:07 20:22:07 1 none none:none
none|none none none
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 32 02:25:05 22:41:30 6 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
cf346981b5
NEW
2eb6c94f0a [0] WinXP 40 of 41 05:14:18 05:14:18 1 none ASM:Graph
PolyEnE| 100% lines=73 trace
53bfe15e91
NEW
1473091351 [0] WinXP
Win2K-f
33 of 33 02:25:05 22:41:30 17 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
d1b3b1de91
NEW
none[none] WinXP 42 of 43 04:12:01 04:12:01 1 none none:none
none|none none none
71e6f60517
NEW
ab4e3226c4
NEW
1ef1781501 [0]
c2d0313e73[0]
Win2K-f
WinXP
40 of 41 01:17:54 05:29:34 3 none ASM:Graph
none:none
Armadillo|
tElock|
lines=91
none
trace
trace
5bbb57c115
NEW
03e5cb3c4a [0] Win2K-f 39 of 41 01:52:17 23:37:15 3 none ASM:Graph
Armadillo| 0% lines=91 trace
1da4193446
NEW
6278c9374a
NEW
8a97c8536a [none]
cc7aaf6ea9[none]
Win2K-f 37 of 39 19:49:48 19:49:48 1 none none:none
none:none
none|none
none|none
none
none
none
none
4b399e5e4e
NEW
none[none] WinXP 24 of 43 13:07:41 21:14:06 3 none none:none
none|none none none
b502f83a7c
NEW
28f5be93b0 [0] WinXP 32 of 32 08:48:50 08:48:50 1 none ASM:Graph
PolyEnE| 99% lines=73 trace
5d445c59d8
NEW
892e12db7b [0] Win2K-f 39 of 41 02:20:41 02:20:41 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
4b399e5e4e
NEW
533d15b5ce
NEW
none[none]
c67adf46e2[0]
WinXP 30 of 33 21:14:06 21:14:06 1 none none:none
ASM:Graph
none|none
tElock|
96% none
lines=126
embedded dns
none
trace
d74b8d6c6b
NEW
none[none] WinXP 40 of 42 23:40:23 23:40:23 1 none none:none
none|none none none
a12cab51ef
NEW
none[0] WinXP 29 of 29 03:05:12 03:05:12 1 none none:none
ASPack| 54% lines=281
embedded dns
trace
4b399e5e4e
NEW
533d15b5ce
NEW
58c343a8d8
NEW
b2b8faa685
NEW
c29e9cd87a
NEW
none[none]
c67adf46e2[0]
none [0]
none [none]
none [none]
Win2K-f
WinXP
35 of 43 05:55:56 21:14:06 4 none none:none
ASM:Graph
none:none
none:none
none:none
none|none
tElock|
Armadillo|
none|none
none|none
none
lines=126
embedded dns
lines=91
none
none
none
trace
trace
none
none
e30eff4db6
NEW
none[none] Win2K-f 40 of 42 17:58:20 17:58:20 1 none none:none
none|none none none
cb7a1c872d
NEW
none[none] WinXP 42 of 43 09:43:32 09:43:32 1 none none:none
none|none none none
a4eb4cac6b
NEW
none[none] WinXP 39 of 43 13:01:27 15:27:50 2 none none:none
none|none none none
1e12f5145a
NEW
f208493e65
NEW
617af909de [0]
5100adb4f9[0]
WinXP 40 of 41 13:29:05 13:29:05 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
4b399e5e4e
NEW
533d15b5ce
NEW
58c343a8d8
NEW
none[none]
c67adf46e2[0]
none [0]
WinXP 28 of 33 21:14:06 21:14:06 1 none none:none
ASM:Graph
none:none
none|none
tElock|
Armadillo|
0% none
lines=126
embedded dns
lines=91
none
trace
trace
acdb1903eb
NEW
none[none] WinXP 39 of 41 18:32:28 18:32:28 1 none none:none
none|none none none
5af05bec2e
NEW
ec2138d5b2 [0] Win2K-f 39 of 41 20:13:45 20:13:45 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
4b399e5e4e
NEW
4e924eaa55
NEW
ab9c4b5f21
NEW
b2b8faa685
NEW
b4afa1df1d
NEW
none[none]
none [none]
5fe48b2dcc[0]
none [none]
none [none]
WinXP 41 of 43 13:07:41 13:07:41 1 none none:none
none:none
ASM:Graph
none:none
none:none
none|none
none|none
Armadillo|
none|none
none|none
none
none
lines=42
none
none
none
none
trace
none
none
1da4193446
NEW
8a97c8536a [none] Win2K-f 38 of 40 19:49:48 19:49:48 1 none none:none
none|none none none
4b399e5e4e
NEW
4e924eaa55
NEW
ab9c4b5f21
NEW
b2b8faa685
NEW
b4afa1df1d
NEW
c29e9cd87a
NEW
d789c8d157
NEW
none[none]
none [none]
5fe48b2dcc[0]
none [none]
none [none]
none [none]
5f6572479f[0]
WinXP 31 of 33 13:07:41 13:07:41 1 none none:none
none:none
ASM:Graph
none:none
none:none
none:none
ASM:Graph
none|none
none|none
Armadillo|
none|none
none|none
none|none
PolyEnE|
95% none
none
lines=42
none
none
none
lines=113
embedded dns
none
none
trace
none
none
none
trace
2b040dd00c
NEW
none[none] Win2K-f 42 of 42 10:49:50 10:49:50 1 none none:none
none|none none none
71e6f60517
NEW
1ef1781501 [0] Win2K-f
WinXP
40 of 41 01:17:54 05:29:34 3 none ASM:Graph
Armadillo| 0% lines=91 trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
WinXP
Win2K-f
0 of 33 04:48:21 22:35:39 10 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
1e12f5145a
NEW
617af909de [0] WinXP 39 of 41 13:29:05 13:29:05 1 none ASM:Graph
Armadillo| 0% lines=91 trace
c89b154681
NEW
58d02dbffa [0] Win2K-f 40 of 41 05:02:23 05:02:23 1 none ASM:Graph
StarForce| 96% lines=64
embedded dns
trace
d8040f84d4
NEW
d683995e84 [0] WinXP 39 of 41 05:42:07 05:54:34 2 none ASM:Graph
PolyEnE| 100% lines=73 trace
34cd9e2f76
NEW
376a6b6ecd
NEW
none[none]
none [none]
WinXP 40 of 41 19:23:48 19:23:48 1 none none:none
none:none
none|none
none|none
none
none
none
none
997e774fb3
NEW
none[none] WinXP 41 of 42 11:33:43 11:33:43 1 none none:none
none|none none none
8081b6b58c
NEW
none[none] WinXP 40 of 42 10:48:52 10:48:52 1 none none:none
none|none none none
ecfbf321d3
NEW
none[none] Win2K-f 38 of 41 14:30:37 15:57:54 2 none none:none
none|none none none
4b399e5e4e
NEW
4e924eaa55
NEW
none[none]
none [none]
WinXP 26 of 43 13:07:41 13:07:41 1 none none:none
none:none
none|none
none|none
none
none
none
none
e6c5ed5f5b
NEW
none[none] Win2K-f 39 of 41 16:07:24 16:07:24 1 none none:none
none|none none none
07fabc79ef
NEW
none[0] WinXP 0 of 32 20:03:43 20:03:43 1 none none:none
Armadillo| 0% lines=90 trace
b3f4c6eb3f
NEW
none[none] WinXP 41 of 42 05:52:30 05:52:30 1 none none:none
none|none none none
986b59708d
NEW
none[0] WinXP 29 of 29 03:22:13 13:23:29 3 none none:none
PolyEnE| 100% lines=57 trace
a47c6c159a
NEW
none[none] WinXP 39 of 43 07:37:27 07:37:27 1 none none:none
none|none none none
0283c4b569
NEW
none[none] Win2K-f 39 of 42 14:23:55 14:23:55 1 none none:none
none|none none none
53aa804019
NEW
95ddd4a823
NEW
29c6cdbf45 [0]
9e78315a6d[0]
WinXP 39 of 41 11:40:49 11:40:49 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
9b285231fe
NEW
a9a8f0a26f [0] WinXP 41 of 42 09:04:59 09:04:59 1 none none:none
PolyEnE| none trace
5bbb57c115
NEW
75ac189d9e
NEW
03e5cb3c4a [0]
705dbaa801[0]
Win2K-f 39 of 41 01:52:17 23:37:15 3 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
5c6df5141d
NEW
none[none] WinXP 41 of 41 00:56:40 00:56:40 1 none none:none
none|none none none
d031b42d3f
NEW
none[none] Win2K-f 38 of 41 09:11:17 09:11:17 1 none none:none
none|none none none
5c39773b13
NEW
c64405f2e9 [0] Win2K-f 38 of 41 19:47:33 19:47:33 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
87bd0a062f
NEW
dc70d9623a [0] Win2K-f 30 of 33 05:55:56 05:55:56 1 none ASM:Graph
Armadillo| 0% lines=91 trace
5c39773b13
NEW
a1acc403a2
NEW
c64405f2e9 [0]
54ef26c2f9[0]
Win2K-f 37 of 41 19:47:33 19:47:33 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
10c560fc02
NEW
none[none] Win2K-f 40 of 41 07:34:21 07:34:21 1 none none:none
none|none none none
fb486908b0
NEW
none[none] WinXP 41 of 43 07:38:44 07:38:44 1 none none:none
none|none none none
9716d7995a
NEW
c3a5354b6f [0] WinXP 35 of 35 18:02:37 18:02:37 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
ca163c3b7b
NEW
none[none] WinXP 37 of 41 02:37:44 02:37:44 1 none none:none
none|none none none
216c61ac3d
NEW
none[none] Win2K-f 41 of 43 07:01:02 18:01:09 2 none none:none
none|none none none
aad01847fa
NEW
none[none] WinXP 42 of 43 02:53:30 22:25:27 2 none none:none
none|none none none
7f60162c2c
NEW
none[0] WinXP 25 of 25 00:43:51 13:49:16 4 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
10c560fc02
NEW
1b8d146832
NEW
none[none]
none [none]
Win2K-f 40 of 41 07:34:21 07:34:21 1 none none:none
none:none
none|none
none|none
none
none
none
none
5d445c59d8
NEW
8a54950abb
NEW
892e12db7b [0]
f6b9e43917[0]
Win2K-f 37 of 40 02:20:41 02:20:41 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
34cd9e2f76
NEW
none[none] WinXP 37 of 41 19:23:48 19:23:48 1 none none:none
none|none none none
7d99b0e910
NEW
none[0] WinXP 26 of 28 01:46:05 12:09:19 11 none none:none
PolyEnE| 99% lines=68 trace
770a04a72c
NEW
none[3] WinXP 15 of 41 13:18:01 13:18:01 1 none none:none
none|none none trace
d20f157117
NEW
738f555183 [0] WinXP 34 of 34 07:50:59 21:44:13 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
87bd0a062f
NEW
c29e9cd87a
NEW
c7d6018f97
NEW
dc70d9623a [0]
none [none]
5c1d8bbd5b[0]
Win2K-f 31 of 33 05:55:56 05:55:56 1 none ASM:Graph
none:none
ASM:Graph
Armadillo|
none|none
tElock|
96% lines=91
none
lines=125
embedded dns
trace
none
trace
a3c82ff952
NEW
none[none] WinXP 39 of 41 14:46:21 14:46:21 1 none none:none
none|none none none
53aa804019
NEW
29c6cdbf45 [0] WinXP 39 of 41 11:40:49 11:40:49 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
4b399e5e4e
NEW
4e924eaa55
NEW
ab9c4b5f21
NEW
none[none]
none [none]
5fe48b2dcc[0]
WinXP 39 of 41 13:07:41 13:07:41 1 none none:none
none:none
ASM:Graph
none|none
none|none
Armadillo|
0% none
none
lines=42
none
none
trace
4b399e5e4e
NEW
533d15b5ce
NEW
58c343a8d8
NEW
b2b8faa685
NEW
none[none]
c67adf46e2[0]
none [0]
none [none]
WinXP 10 of 43 13:07:41 21:14:06 3 none none:none
ASM:Graph
none:none
none:none
none|none
tElock|
Armadillo|
none|none
none
lines=126
embedded dns
lines=91
none
none
trace
trace
none
5af05bec2e
NEW
ff34a1caa4
NEW
ec2138d5b2 [0]
979a6569d4[0]
Win2K-f 39 of 41 20:13:45 20:13:45 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
d031b42d3f
NEW
fa14802705
NEW
none[none]
none [none]
Win2K-f 38 of 41 09:11:17 09:11:17 1 none none:none
none:none
none|none
none|none
none
none
none
none