Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


08 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
2daddf3f53
NEW
4e53336b38
NEW		 none[none]
none [none]		 Win2K-f 42 of 43 03:06:27 03:06:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a5afad5d2f
NEW		 none[none] WinXP 40 of 42 09:30:24 09:30:24 1 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 01:09:31 16:33:01 5 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
53bfe15e91
NEW		 1473091351 [0] WinXP
Win2K-f		 33 of 33 01:09:31 19:58:02 11 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
71e6f60517
NEW
ab4e3226c4
NEW		 1ef1781501 [0]
c2d0313e73[0]		 WinXP 40 of 41 10:34:35 10:34:35 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=91
none		 trace
trace
95d1a78f0d
NEW		 none[none] WinXP 42 of 43 11:46:58 11:46:58 1 none none:none
 none|none none none
7549900329
NEW		 4b13f1921b [0] WinXP 41 of 42 13:08:30 13:08:30 1 none none:none
 tElock| none trace
2deb2753bb
NEW
2f9cc78e7b
NEW		 none[none]
none [none]		 WinXP 0 of 41 18:14:30 18:14:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5d445c59d8
NEW		 892e12db7b [0] Win2K-f 39 of 41 10:42:43 10:42:43 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
bca9e0fb5f
NEW		 1d6b20137d [0] Win2K-f 31 of 32 18:19:58 18:19:58 1 none ASM:Graph
 PolyEnE| 96% lines=64
embedded dns		 trace
2deb2753bb
NEW
2f9cc78e7b
NEW
38d8f594cd
NEW
827e44840a
NEW
b6a0b73e41
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f
WinXP		 25 of 43 15:22:06 18:14:30 3 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
2deb2753bb
NEW
2f9cc78e7b
NEW
38d8f594cd
NEW		 none[none]
none [none]
none [none]		 WinXP 42 of 43 18:14:30 18:14:30 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
51d87960af
NEW		 none[none] WinXP 36 of 42 11:04:18 11:04:18 1 none none:none
 none|none none none
4c3df24b32
NEW		 none[0] WinXP 0 of 33 13:46:02 13:46:02 1 none none:none
 Armadillo| 0% lines=90 trace
2deb2753bb
NEW
34ae91af51
NEW
827e44840a
NEW
99e40412c8
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 17 of 42 15:22:06 15:22:06 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
4410d5ed68
NEW		 none[none] WinXP 39 of 43 01:11:28 01:11:28 1 none none:none
 none|none none none
2deb2753bb
NEW
2f9cc78e7b
NEW
38d8f594cd
NEW
827e44840a
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f
WinXP		 14 of 43 15:22:06 18:14:30 3 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
43b8f21924
NEW		 none[3] WinXP 32 of 41 05:22:55 05:22:55 1 none none:none
 none|none none trace
9af6ce3cc8
NEW		 none[none] WinXP 31 of 43 01:04:06 01:04:06 1 none none:none
 none|none none none
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 18:47:03 18:47:03 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
7a07facf44
NEW		 none[none] WinXP 36 of 40 09:42:47 09:42:47 1 none none:none
 none|none none none
db03c02347
NEW		 none[none] WinXP 40 of 41 22:24:01 22:24:01 1 none none:none
 none|none none none
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 05:07:11 05:07:11 1 none none:none
 none|none 33% lines=60 trace
71e6f60517
NEW		 1ef1781501 [0] WinXP 40 of 41 10:34:35 10:34:35 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
d416684873
NEW		 none[none] WinXP 27 of 43 20:51:59 20:51:59 1 none none:none
 none|none none none
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 12:56:28 19:58:02 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
27b8ca6a46
NEW		 none[none] Win2K-f 43 of 43 00:59:59 00:59:59 1 none none:none
 none|none none none
5285741560
NEW		 60590b8b67 [0] WinXP 37 of 40 05:48:25 05:48:25 1 none ASM:Graph
 none|none 55% lines=59 trace
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 23:06:59 23:06:59 1 none none:none
 PolyEnE| 99% lines=68 trace
622ed518b6
NEW		 none[none] WinXP 41 of 43 09:40:15 09:40:15 1 none none:none
 none|none none none
2deb2753bb
NEW		 none[none] Win2K-f
WinXP		 5 of 43 15:22:06 18:14:30 3 none none:none
 none|none none none
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 18:47:03 18:47:03 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
2deb2753bb
NEW
34ae91af51
NEW
827e44840a
NEW
99e40412c8
NEW
a72398081f
NEW		 none[none]
none [none]
none [none]
none [none]
3f0ad45d1c[0]		 Win2K-f 34 of 40 15:22:06 15:22:06 1 none none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
tElock|		 0% none
none
none
none
lines=10		 none
none
none
none
trace
2deb2753bb
NEW
34ae91af51
NEW
827e44840a
NEW
99e40412c8
NEW
a72398081f
NEW
b6a0b73e41
NEW
eb30e132f5
NEW		 none[none]
none [none]
none [none]
none [none]
3f0ad45d1c[0]
none [none]
none [none]		 Win2K-f 13 of 43 15:22:06 15:22:06 1 none none:none
none:none
none:none
none:none
ASM:Graph
none:none
none:none
 none|none
none|none
none|none
none|none
tElock|
none|none
none|none		 none
none
none
none
lines=10
none
none		 none
none
none
none
trace
none
none
8e8fff0d13
NEW		 none[none] WinXP 39 of 41 20:52:47 20:52:47 1 none none:none
 none|none none none
a1fac31325
NEW		 0fd057b5e2 [0] Win2K-f
WinXP		 39 of 42 06:40:16 22:41:17 2 none none:none
 Armadillo| none trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 03:40:51 03:40:51 1 none none:none
 Armadillo| 0% lines=90 trace
a1fac31325
NEW
c018e17b5b
NEW		 0fd057b5e2 [0]
8caee80d88[0]		 Win2K-f
WinXP		 39 of 42 06:40:16 22:41:17 2 none none:none
none:none
 Armadillo|
StarForce|		 none
none		 trace
trace
de4624560d
NEW		 none[none] WinXP 40 of 42 13:05:18 13:05:18 1 none none:none
 none|none none none
45885d17fa
NEW		 none[none] WinXP 40 of 42 23:04:23 23:04:23 1 none none:none
 none|none none none
6e6fde936f
NEW		 none[none] WinXP 41 of 43 03:40:05 03:40:05 1 none none:none
 none|none none none
986b59708d
NEW		 none[0] WinXP 29 of 29 17:41:50 17:41:50 1 none none:none
 PolyEnE| 100% lines=57 trace
53bfe15e91
NEW
97437a0627
NEW		 1473091351 [0]
none [none]		 WinXP 38 of 41 18:33:41 18:33:41 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=75
embedded dns
none		 trace
none
88f3393e20
NEW		 none[none] WinXP 42 of 43 08:31:44 08:31:44 1 none none:none
 none|none none none
53aa804019
NEW
95ddd4a823
NEW		 29c6cdbf45 [0]
9e78315a6d[0]		 Win2K-f 39 of 41 20:34:56 20:34:56 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
2daddf3f53
NEW		 none[none] Win2K-f 8 of 43 03:06:27 03:06:27 1 none none:none
 none|none none none
bca9e0fb5f
NEW
e53a9ea82e
NEW		 1d6b20137d [0]
none [0]		 Win2K-f 23 of 33 18:19:58 18:19:58 1 none ASM:Graph
none:none
 PolyEnE|
Armadillo|		 0% lines=64
embedded dns
lines=90		 trace
trace
9840fb7808
NEW		 none[none] WinXP 29 of 43 04:56:40 04:56:40 1 none none:none
 none|none none none
0b951c2832
NEW		 5fe761661a [0] Win2K-f 32 of 36 23:38:21 23:38:21 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
2deb2753bb
NEW
34ae91af51
NEW		 none[none]
none [none]		 Win2K-f 18 of 43 15:22:06 15:22:06 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
d11b1f56f9
NEW		 none[none] WinXP 40 of 41 23:08:13 23:08:13 1 none none:none
 none|none none none
9716d7995a
NEW		 c3a5354b6f [0] WinXP 35 of 35 22:29:08 22:29:08 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
2cceeae738
NEW		 none[none] WinXP 41 of 43 00:43:11 00:43:11 1 none none:none
 none|none none none
aad01847fa
NEW		 none[none] WinXP 42 of 43 07:05:50 07:05:50 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 05:46:48 05:46:48 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
3a521d2be7
NEW		 none[none] Win2K-f 7 of 43 13:30:00 13:30:00 1 none none:none
 none|none none none
7549900329
NEW
b71514f095
NEW		 4b13f1921b [0]
f6aa3689d1[0]		 WinXP 40 of 42 13:08:30 13:08:30 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
fb85113a6e
NEW		 none[none] WinXP 41 of 41 15:21:56 15:21:56 1 none none:none
 none|none none none
5d445c59d8
NEW
8a54950abb
NEW		 892e12db7b [0]
f6b9e43917[0]		 Win2K-f 37 of 40 10:42:43 10:42:43 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 01:04:43 19:21:08 9 none none:none
 PolyEnE| 99% lines=68 trace
8fc7967af9
NEW		 none[none] WinXP 42 of 43 05:18:01 05:18:01 1 none none:none
 none|none none none
e18a983c20
NEW		 none[none] WinXP 36 of 42 21:49:08 21:49:08 1 none none:none
 none|none none none
f5286bdcaf
NEW		 none[none] Win2K-f 41 of 42 15:54:03 15:54:03 1 none none:none
 none|none none none
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 03:00:06 08:37:40 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
b8076e37ae
NEW		 52953fed05 [0] WinXP 28 of 41 05:23:12 05:23:12 1 none none:none
 StarForce| none trace
53aa804019
NEW		 29c6cdbf45 [0] Win2K-f 39 of 41 20:34:56 20:34:56 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
6642d0be08
NEW		 none[none] WinXP 42 of 43 11:27:36 11:27:36 1 none none:none
 none|none none none
0b951c2832
NEW
e4ed4df0f0
NEW		 5fe761661a [0]
de471fc380[0]		 Win2K-f 34 of 36 23:38:21 23:38:21 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
37beabdfa7
NEW		 none[none] WinXP 36 of 41 07:14:28 07:14:28 1 none none:none
 none|none none none
68e76ac69b
NEW		 none[none] WinXP 38 of 40 18:21:48 18:21:48 1 none none:none
 none|none none none
8a2553433c
NEW		 none[none] WinXP 38 of 42 07:24:23 07:24:23 1 none none:none
 none|none none none
5ed0874084
NEW		 none[none] WinXP 37 of 43 01:37:19 01:37:19 1 none none:none
 none|none none none
513b4a0dd4
NEW		 none[none] WinXP 40 of 42 09:16:35 09:16:35 1 none none:none
 none|none none none
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 01:41:10 01:49:51 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace