Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



01 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 32 07:01:49 22:34:39 7 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
377ae8c2fd
NEW
none[none] Win2K-f 40 of 42 17:47:44 17:47:44 1 none none:none
none|none none none
53bfe15e91
NEW
1473091351 [0] Win2K-f
WinXP
33 of 33 00:06:35 22:34:39 14 none ASM:Graph
tElock| 96% lines=75
embedded dns
trace
c0014c4a4e
NEW
none[none] WinXP 42 of 43 04:55:22 04:55:22 1 none none:none
none|none none none
71e6f60517
NEW
ab4e3226c4
NEW
1ef1781501 [0]
c2d0313e73[0]
WinXP
Win2K-f
40 of 41 02:36:37 18:30:54 2 none ASM:Graph
none:none
Armadillo|
tElock|
lines=91
none
trace
trace
53bfe15e91
NEW
b7082104e4
NEW
1473091351 [0]
c5b49e7b82[0]
Win2K-f
WinXP
8 of 33 00:06:35 16:51:27 2 none ASM:Graph
ASM:Graph
tElock|
tElock|
100% lines=75
embedded dns
lines=41
trace
trace
0474b4b09f
NEW
affa94efc0 [0] Win2K-f 34 of 36 23:52:12 23:52:12 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
377ae8c2fd
NEW
7cfdf42414
NEW
none[none]
none [none]
Win2K-f 40 of 42 17:47:44 17:47:44 1 none none:none
none:none
none|none
none|none
none
none
none
none
270559591a
NEW
b3ae886db6
NEW
none[none]
none [none]
Win2K-f 38 of 41 23:16:54 23:16:54 1 none none:none
none:none
none|none
none|none
none
none
none
none
8b41cb7a41
NEW
97fef473b9
NEW
ef18d720f3 [0]
ff4e7d6992[0]
Win2K-f 33 of 33 00:25:41 21:57:44 2 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=90
lines=64
embedded dns
trace
trace
5d445c59d8
NEW
892e12db7b [0] WinXP 39 of 41 15:16:08 15:16:08 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
f3932b94a6
NEW
910494cc45 [0] Win2K-f 40 of 41 06:18:00 16:30:37 2 none ASM:Graph
none|none 98% lines=546 trace
e52504d836
NEW
none[none] WinXP 42 of 43 11:03:26 16:33:22 2 none none:none
none|none none none
741e3b03b3
NEW
none[0] WinXP 31 of 32 18:05:53 18:05:53 1 none none:none
none|none 32% lines=61 trace
3bf5f427e9
NEW
none[none] WinXP 42 of 43 14:18:46 21:55:21 2 none none:none
none|none none none
831f4ee0a7
NEW
none[0] WinXP 29 of 29 08:28:08 08:28:08 1 none none:none
none|none 33% lines=60 trace
751685117f
NEW
none[none] WinXP 40 of 42 10:57:33 10:57:33 1 none none:none
none|none none none
dc2dc01b37
NEW
none[none] WinXP 41 of 42 05:00:05 05:00:05 1 none none:none
none|none none none
10759405e0
NEW
d08e00dfaf
NEW
292d343248 [0]
854c49d8c4[0]
Win2K-f 39 of 41 08:22:51 08:22:51 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
WinXP 0 of 33 06:33:19 06:33:19 1 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
97437a0627
NEW
a4fe04a13b
NEW
none[none]
none [none]
WinXP 39 of 42 11:53:52 11:53:52 1 none none:none
none:none
none|none
none|none
none
none
none
none
71e6f60517
NEW
1ef1781501 [0] WinXP
Win2K-f
40 of 41 02:36:37 18:30:54 2 none ASM:Graph
Armadillo| 0% lines=91 trace
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
Win2K-f
WinXP
0 of 33 11:40:15 21:39:30 4 none ASM:Graph
none:none
tElock|
Armadillo|
0% lines=75
embedded dns
lines=90
trace
trace
38ed850a0e
NEW
b9297745a1
NEW
46990f37cd [0]
4294884d84[0]
Win2K-f 35 of 38 22:08:25 22:08:25 1 none ASM:Graph
ASM:Graph
Armadillo|
tElock|
96% lines=91
lines=64
embedded dns
trace
trace
0474b4b09f
NEW
1c3210698a
NEW
affa94efc0 [0]
38bbefb8cc[0]
Win2K-f 29 of 33 23:52:12 23:52:12 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
5285741560
NEW
60590b8b67 [0] WinXP 37 of 40 07:48:20 07:48:20 1 none ASM:Graph
none|none 55% lines=59 trace
10759405e0
NEW
292d343248 [0] Win2K-f 38 of 41 08:22:51 08:22:51 1 none ASM:Graph
Armadillo| 0% lines=91 trace
a1fac31325
NEW
0fd057b5e2 [0] WinXP 39 of 42 22:18:16 22:18:16 1 none none:none
Armadillo| none trace
07fabc79ef
NEW
none[0] Win2K-f
WinXP
0 of 32 01:35:19 04:25:07 2 none none:none
Armadillo| 0% lines=90 trace
a1fac31325
NEW
c018e17b5b
NEW
0fd057b5e2 [0]
8caee80d88[0]
WinXP 39 of 42 22:18:16 22:18:16 1 none none:none
none:none
Armadillo|
StarForce|
none
none
trace
trace
8b41cb7a41
NEW
ef18d720f3 [0] Win2K-f 3 of 41 00:25:41 21:57:44 2 none ASM:Graph
Armadillo| 0% lines=90 trace
761a66b891
NEW
b469dac5dc [0] Win2K-f 38 of 41 04:59:48 04:59:48 1 none ASM:Graph
tElock| 96% lines=64
embedded dns
trace
d8c3f50fb9
NEW
none[none] WinXP 39 of 43 08:36:20 08:36:20 1 none none:none
none|none none none
97437a0627
NEW
none[none] WinXP 38 of 41 11:53:52 11:53:52 1 none none:none
none|none none none
986b59708d
NEW
none[0] WinXP 29 of 29 15:23:37 15:23:37 1 none none:none
PolyEnE| 100% lines=57 trace
6e6fde936f
NEW
none[none] WinXP 41 of 43 20:04:01 20:04:01 1 none none:none
none|none none none
88f3393e20
NEW
none[none] WinXP 42 of 43 20:35:06 20:35:06 1 none none:none
none|none none none
5931f37d91
NEW
none[none] WinXP 19 of 43 21:00:39 21:00:39 1 none none:none
none|none none none
aa25b4e779
NEW
none[none] WinXP 42 of 43 13:49:08 13:49:08 1 none none:none
none|none none none
9d38d43309
NEW
none[none] WinXP 41 of 41 08:11:00 08:11:00 1 none none:none
none|none none none
8d0809971a
NEW
none[none] WinXP 35 of 37 06:22:09 06:22:09 1 none none:none
none|none none none
d031b42d3f
NEW
none[none] Win2K-f 38 of 41 11:38:30 11:38:30 1 none none:none
none|none none none
38ed850a0e
NEW
46990f37cd [0] Win2K-f 34 of 38 22:08:25 22:08:25 1 none ASM:Graph
Armadillo| 0% lines=91 trace
d60e538e72
NEW
none[3] Win2K-f 2 of 37 10:58:15 10:58:15 1 none none:none
UPX| none trace
218ce30f5c
NEW
none[3] Win2K-f 18 of 35 08:33:15 08:33:15 1 none none:none
none|none none trace
6c21e2c88b
NEW
none[none] WinXP 41 of 41 09:28:40 09:28:40 1 none none:none
none|none none none
9716d7995a
NEW
c3a5354b6f [0] WinXP 35 of 35 10:21:44 17:30:03 2 none ASM:Graph
PolyEnE| 99% lines=68 trace
420b1a76c4
NEW
none[none] WinXP 42 of 43 03:23:09 03:23:09 1 none none:none
none|none none none
761a66b891
NEW
98d05c039b
NEW
b469dac5dc [0]
none [none]
Win2K-f 38 of 41 04:59:48 04:59:48 1 none ASM:Graph
none:none
tElock|
none|none
lines=64
embedded dns
none
trace
none
7f60162c2c
NEW
none[0] WinXP 25 of 25 09:23:24 14:48:41 2 none none:none
PolyEnE| 100% lines=93
embedded dns
trace
07fabc79ef
NEW
df6ab00d2f
NEW
none[0]
none [none]
WinXP 41 of 43 04:25:07 04:25:07 1 none none:none
none:none
Armadillo|
none|none
lines=90
none
trace
none
bd06c07731
NEW
none[none] WinXP 40 of 41 07:38:13 07:38:13 1 none none:none
none|none none none
5d445c59d8
NEW
8a54950abb
NEW
892e12db7b [0]
f6b9e43917[0]
WinXP 37 of 40 15:16:08 15:16:08 1 none ASM:Graph
ASM:Graph
tElock|
Armadillo|
0% lines=64
embedded dns
lines=91
trace
trace
527d78f1de
NEW
none[none] WinXP 40 of 43 01:53:50 01:53:50 1 none none:none
none|none none none
7d99b0e910
NEW
none[0] WinXP 26 of 28 00:36:19 18:41:41 7 none none:none
PolyEnE| 99% lines=68 trace
cd959673eb
NEW
none[none] Win2K-f 22 of 43 16:04:43 16:04:43 1 none none:none
none|none none none
8fc7967af9
NEW
none[none] WinXP 42 of 43 14:42:12 14:42:12 1 none none:none
none|none none none
770a04a72c
NEW
none[3] Win2K-f 15 of 41 19:46:55 19:46:55 1 none none:none
none|none none trace
f5286bdcaf
NEW
none[none] Win2K-f 41 of 42 20:46:46 20:46:46 1 none none:none
none|none none none
d20f157117
NEW
738f555183 [0] WinXP 34 of 34 05:33:48 09:23:26 2 none ASM:Graph
PolyEnE| 99% lines=68 trace
270559591a
NEW
none[none] Win2K-f 38 of 41 23:16:54 23:16:54 1 none none:none
none|none none none
5e8ccc4190
NEW
8d5f86583f [0] WinXP 39 of 40 05:15:16 05:15:16 1 none ASM:Graph
PolyEnE| 100% lines=68 trace
65db8c1d0d
NEW
none[none] WinXP 40 of 40 02:38:38 02:38:38 1 none none:none
none|none none none
8a2553433c
NEW
none[none] WinXP 38 of 42 02:46:33 19:33:28 3 none none:none
none|none none none
60c4a8055b
NEW
none[none] WinXP 40 of 43 19:28:55 19:28:55 1 none none:none
none|none none none
d031b42d3f
NEW
fa14802705
NEW
none[none]
none [none]
Win2K-f 38 of 41 11:38:30 11:38:30 1 none none:none
none:none
none|none
none|none
none
none
none
none