Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


10 November 2010

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
d2b40c91a1
NEW		 fbaa414397 [0] Win2K-f 37 of 41 16:07:20 16:07:20 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
ecfbf321d3
NEW		 none[none] WinXP 38 of 41 05:12:09 20:42:38 2 none none:none
 none|none none none
3b03dcfc80
NEW		 none[none] WinXP 29 of 41 15:24:49 15:24:49 1 none none:none
 none|none none none
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 WinXP
Win2K-f		 0 of 32 17:49:43 18:20:00 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
14f47ffd1e
NEW		 90bf4b99ff [0] Win2K-f
WinXP		 40 of 41 16:58:24 21:32:11 2 none ASM:Graph
 tElock| 96% lines=56
embedded dns		 trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 12:19:02 22:43:06 6 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
92b7f99e20
NEW		 none[none] WinXP 40 of 43 09:34:17 09:34:17 1 none none:none
 none|none none none
14f47ffd1e
NEW
74f7b8393b
NEW		 90bf4b99ff [0]
none [none]		 WinXP 8 of 43 21:32:11 21:32:11 1 none ASM:Graph
none:none
 tElock|
none|none		 lines=56
embedded dns
none		 trace
none
c8a3d7df55
NEW		 none[none] WinXP 42 of 43 10:04:53 11:09:25 2 none none:none
 none|none none none
682a384fe9
NEW		 none[3] Win2K-f
WinXP		 31 of 41 01:40:28 08:16:56 2 none none:none
 none|none none trace
866ac9b262
NEW		 none[none] WinXP 39 of 41 07:18:04 07:41:25 2 none none:none
 none|none none none
71e6f60517
NEW
ab4e3226c4
NEW		 1ef1781501 [0]
c2d0313e73[0]		 Win2K-f 40 of 41 17:49:44 20:50:58 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=91
none		 trace
trace
b415d4fbfc
NEW		 none[none] WinXP 41 of 43 17:00:51 17:00:51 1 none none:none
 none|none none none
95d1a78f0d
NEW		 none[none] WinXP 42 of 43 01:38:05 04:35:27 2 none none:none
 none|none none none
6e6fde936f
NEW		 none[none] WinXP 41 of 43 08:32:02 20:50:57 2 none none:none
 none|none none none
53aa804019
NEW
95ddd4a823
NEW		 29c6cdbf45 [0]
9e78315a6d[0]		 WinXP 39 of 41 13:00:08 13:00:08 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
88f3393e20
NEW		 none[none] WinXP 42 of 43 09:15:45 09:15:45 1 none none:none
 none|none none none
7549900329
NEW		 4b13f1921b [0] Win2K-f 41 of 42 09:34:08 09:34:08 1 none none:none
 tElock| none trace
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 01:02:02 12:58:51 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
d031b42d3f
NEW		 none[none] Win2K-f
WinXP		 38 of 41 15:15:38 17:05:28 2 none none:none
 none|none none none
5c6df5141d
NEW		 none[none] WinXP 41 of 41 10:18:25 11:37:49 3 none none:none
 none|none none none
5d445c59d8
NEW		 892e12db7b [0] Win2K-f 39 of 41 19:22:05 19:22:05 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
5069160ffe
NEW
88730549bb
NEW		 65a33ca939 [0]
none [none]		 Win2K-f 38 of 41 05:44:47 05:44:47 1 none none:none
none:none
 StarForce|
none|none		 none
none		 trace
none
c2462f2c37
NEW		 none[none] WinXP 42 of 43 04:46:07 04:46:07 1 none none:none
 none|none none none
5069160ffe
NEW		 65a33ca939 [0] Win2K-f 22 of 41 05:44:47 05:44:47 1 none none:none
 StarForce| none trace
f3932b94a6
NEW		 910494cc45 [0] Win2K-f 40 of 41 00:26:21 00:26:21 1 none ASM:Graph
 none|none 98% lines=546 trace
0114824891
NEW		 none[none] WinXP 42 of 43 05:37:05 05:37:05 1 none none:none
 none|none none none
0e751a5b6d
NEW		 none[none] WinXP 40 of 41 00:28:48 00:28:48 1 none none:none
 none|none none none
e30eff4db6
NEW		 none[none] Win2K-f 40 of 42 14:27:56 14:27:56 1 none none:none
 none|none none none
7f60162c2c
NEW		 none[0] WinXP 25 of 25 06:25:25 23:44:03 4 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
92b7f99e20
NEW
99e40412c8
NEW		 none[none]
none [none]		 WinXP 17 of 42 09:34:17 09:34:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8142caa3a3
NEW		 none[none] WinXP 41 of 43 00:27:37 00:27:37 1 none none:none
 none|none none none
7549900329
NEW
b71514f095
NEW		 4b13f1921b [0]
f6aa3689d1[0]		 Win2K-f 40 of 42 09:34:08 09:34:08 1 none none:none
none:none
 tElock|
Armadillo|		 none
none		 trace
trace
741e3b03b3
NEW		 none[0] WinXP 31 of 32 07:59:04 12:55:13 2 none none:none
 none|none 32% lines=61 trace
1e12f5145a
NEW
f208493e65
NEW		 617af909de [0]
5100adb4f9[0]		 Win2K-f 40 of 41 03:18:02 03:18:02 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
5d445c59d8
NEW
8a54950abb
NEW		 892e12db7b [0]
f6b9e43917[0]		 Win2K-f 37 of 40 19:22:05 19:22:05 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=91		 trace
trace
3ae357d17b
NEW		 none[0] WinXP 29 of 29 04:07:28 04:07:28 1 none none:none
 PolyEnE| 99% lines=73 trace
7d99b0e910
NEW		 none[0] WinXP 26 of 28 00:24:18 17:20:10 9 none none:none
 PolyEnE| 99% lines=68 trace
459d2bddeb
NEW		 10fac04dd2 [0] Win2K-f 40 of 41 12:22:29 12:22:29 1 none ASM:Graph
 none|none 98% lines=546 trace
ab9c4b5f21
NEW
d789c8d157
NEW		 5fe48b2dcc [0]
5f6572479f[0]		 WinXP 31 of 33 14:33:15 14:33:15 1 none ASM:Graph
ASM:Graph
 Armadillo|
PolyEnE|		 95% lines=42
lines=113
embedded dns		 trace
trace
6455904435
NEW		 none[none] WinXP 38 of 41 06:31:15 06:31:15 1 none none:none
 none|none none none
71e6f60517
NEW		 1ef1781501 [0] Win2K-f 40 of 41 17:49:44 20:50:58 2 none ASM:Graph
 Armadillo| 0% lines=91 trace
14f47ffd1e
NEW
50437008d9
NEW		 90bf4b99ff [0]
c1b09ac5d7[0]		 Win2K-f 5 of 41 16:58:24 16:58:24 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=56
embedded dns
lines=90		 trace
trace
1a2c0e6130
NEW		 none[0] WinXP 29 of 29 06:09:33 06:09:33 1 none none:none
 none|none 33% lines=60 trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 Win2K-f
WinXP		 0 of 33 12:19:02 22:43:06 4 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
1e12f5145a
NEW		 617af909de [0] Win2K-f 39 of 41 03:18:02 03:18:02 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
d20f157117
NEW		 738f555183 [0] WinXP 34 of 34 17:49:31 17:49:31 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
14d265a635
NEW		 none[none] WinXP 41 of 42 04:57:58 10:12:47 2 none none:none
 none|none none none
a3c82ff952
NEW		 none[none] WinXP 39 of 41 09:56:09 09:56:09 1 none none:none
 none|none none none
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 17:13:44 17:13:44 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
ab9c4b5f21
NEW		 5fe48b2dcc [0] WinXP 39 of 41 14:33:15 14:33:15 1 none ASM:Graph
 Armadillo| 0% lines=42 trace
53aa804019
NEW		 29c6cdbf45 [0] WinXP 39 of 41 13:00:08 13:00:08 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
8d649f854f
NEW		 none[none] WinXP 41 of 43 10:30:40 10:30:40 1 none none:none
 none|none none none
b46489628e
NEW		 none[none] WinXP 42 of 43 02:01:56 02:01:56 1 none none:none
 none|none none none
3dc6500eb1
NEW		 none[none] Win2K-f 40 of 41 10:57:51 18:04:36 2 none none:none
 none|none none none
03e53fb32a
NEW		 none[none] Win2K-f 43 of 43 12:50:42 12:50:42 1 none none:none
 none|none none none
8a2553433c
NEW		 none[none] WinXP 38 of 42 02:05:29 02:05:29 1 none none:none
 none|none none none
92b7f99e20
NEW
99e40412c8
NEW
ec7cec691c
NEW		 none[none]
none [none]
none [none]		 WinXP 40 of 43 09:34:17 09:34:17 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
5ed0874084
NEW		 none[none] WinXP 37 of 43 08:56:06 08:56:06 1 none none:none
 none|none none none
3dc6500eb1
NEW
ff3843f312
NEW		 none[none]
30a7e641cf[0]		 Win2K-f 38 of 41 10:57:51 18:04:36 2 none none:none
ASM:Graph
 none|none
Armadillo|		 0% none
lines=90		 none
trace
d031b42d3f
NEW
fa14802705
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 38 of 41 15:15:38 17:05:28 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none