Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


27 January 2011

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW
92b7f99e20
NEW
b34dda1468
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 12 of 42 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW		 none[none]
none [none]
none [none]		 Win2K-f 22 of 42 23:20:25 23:20:25 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
10759405e0
NEW		 292d343248 [0] Win2K-f 38 of 41 17:08:07 17:08:07 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
53bfe15e91
NEW
73f1082158
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 32 01:29:25 11:42:38 3 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
a4497aa84e
NEW		 d1b46a6ff9 [0] Win2K-f 41 of 41 15:34:29 15:34:29 1 none ASM:Graph
 none|none 98% lines=546 trace
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW
92b7f99e20
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 40 of 43 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
14f47ffd1e
NEW		 90bf4b99ff [0] WinXP 40 of 41 14:51:13 14:51:13 1 none ASM:Graph
 tElock| 96% lines=56
embedded dns		 trace
53bfe15e91
NEW		 1473091351 [0] Win2K-f
WinXP		 33 of 33 01:29:25 22:13:05 9 none ASM:Graph
 tElock| 96% lines=75
embedded dns		 trace
682a384fe9
NEW		 none[3] Win2K-f 31 of 41 20:03:05 20:03:05 1 none none:none
 none|none none trace
71e6f60517
NEW
ab4e3226c4
NEW		 1ef1781501 [0]
c2d0313e73[0]		 Win2K-f 40 of 41 17:41:11 17:41:11 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=91
none		 trace
trace
07fabc79ef
NEW		 none[0] Win2K-f 0 of 32 03:12:07 03:37:05 2 none none:none
 Armadillo| 0% lines=90 trace
67f1a33096
NEW
724cf0dc37
NEW		 148e04eaab [0]
901dd267d4[0]		 WinXP 38 of 40 20:05:33 20:05:33 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
b269b15ffd
NEW		 none[none] WinXP 42 of 43 02:08:42 12:31:51 2 none none:none
 none|none none none
10eebdc28e
NEW
761a66b891
NEW		 e2ca2da35d [0]
b469dac5dc[0]		 WinXP 38 of 41 00:28:23 00:28:23 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
31ec203307
NEW		 none[none] WinXP 39 of 42 22:26:14 22:26:14 1 none none:none
 none|none none none
53bfe15e91
NEW
b7082104e4
NEW		 1473091351 [0]
c5b49e7b82[0]		 Win2K-f 8 of 33 22:13:05 22:13:05 1 none ASM:Graph
ASM:Graph
 tElock|
tElock|		 100% lines=75
embedded dns
lines=41		 trace
trace
c318ecb80c
NEW		 none[none] WinXP 43 of 43 18:50:16 18:50:16 1 none none:none
 none|none none none
95d1a78f0d
NEW		 none[none] WinXP 42 of 43 14:10:10 14:10:10 1 none none:none
 none|none none none
043453f3dd
NEW
2896e1e666
NEW
7e21af562b
NEW
9083b860c0
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 29 of 42 23:47:01 23:47:01 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
2049cc2094
NEW		 none[none] WinXP 42 of 42 17:03:52 17:03:52 1 none none:none
 none|none none none
b502f83a7c
NEW		 28f5be93b0 [0] WinXP 32 of 32 06:45:24 22:11:26 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
d031b42d3f
NEW		 none[none] Win2K-f
WinXP		 38 of 41 10:21:17 21:24:25 2 none none:none
 none|none none none
c19c8a2776
NEW		 none[none] WinXP 42 of 43 03:15:55 03:15:55 1 none none:none
 none|none none none
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW
92b7f99e20
NEW
b34dda1468
NEW
b34e640329
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 29 of 43 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none		 none
none
none
none
none
none
none
fb486908b0
NEW		 none[none] WinXP 41 of 43 02:53:15 21:39:06 6 none none:none
 none|none none none
043453f3dd
NEW
2896e1e666
NEW
7e21af562b
NEW		 none[none]
none [none]
none [none]		 Win2K-f 0 of 42 23:47:01 23:47:01 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
1096ba143e
NEW		 none[none] WinXP 40 of 41 18:14:06 18:14:06 1 none none:none
 none|none none none
0b951c2832
NEW		 5fe761661a [0] Win2K-f 32 of 36 09:25:59 09:25:59 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
a3b217d38a
NEW
e453911822
NEW		 f87b27ab2c [0]
86954ebe4e[0]		 Win2K-f 3 of 41 16:35:52 16:35:52 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=64
embedded dns
lines=90		 trace
trace
d11b1f56f9
NEW		 none[none] WinXP 40 of 41 03:08:19 10:39:46 2 none none:none
 none|none none none
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW
92b7f99e20
NEW
b34dda1468
NEW
b34e640329
NEW
e895dc9399
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 5 of 43 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none		 none
none
none
none
none
none
none
none
67f1a33096
NEW		 148e04eaab [0] WinXP 38 of 40 20:05:33 20:05:33 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
7f60162c2c
NEW		 none[0] WinXP 25 of 25 07:08:53 07:08:53 1 none none:none
 PolyEnE| 100% lines=93
embedded dns		 trace
aad01847fa
NEW		 none[none] WinXP 42 of 43 09:54:26 10:19:07 2 none none:none
 none|none none none
18d5ebebab
NEW		 none[none] Win2K-f 23 of 43 23:20:25 23:20:25 1 none none:none
 none|none none none
18d5ebebab
NEW
2382c263f9
NEW		 none[none]
none [none]		 Win2K-f 32 of 40 23:20:25 23:20:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
043453f3dd
NEW		 none[none] Win2K-f 1 of 40 23:47:01 23:47:01 1 none none:none
 none|none none none
7d99b0e910
NEW		 none[0] WinXP 26 of 28 07:29:20 07:29:20 1 none none:none
 PolyEnE| 99% lines=68 trace
10759405e0
NEW
d08e00dfaf
NEW		 292d343248 [0]
854c49d8c4[0]		 Win2K-f 39 of 41 17:08:07 17:08:07 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
53bfe15e91
NEW
57ce4acac2
NEW		 1473091351 [0]
none [0]		 Win2K-f 0 of 33 11:59:54 11:59:54 1 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 15 of 43 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
71e6f60517
NEW		 1ef1781501 [0] Win2K-f 40 of 41 17:41:11 17:41:11 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
14f47ffd1e
NEW
50437008d9
NEW		 90bf4b99ff [0]
c1b09ac5d7[0]		 WinXP 5 of 41 14:51:13 14:51:13 1 none ASM:Graph
ASM:Graph
 tElock|
Armadillo|		 0% lines=56
embedded dns
lines=90		 trace
trace
53bfe15e91
NEW
a08f3b74a4
NEW		 1473091351 [0]
none [0]		 WinXP 0 of 33 10:47:40 18:41:25 2 none ASM:Graph
none:none
 tElock|
Armadillo|		 0% lines=75
embedded dns
lines=90		 trace
trace
043453f3dd
NEW
2896e1e666
NEW		 none[none]
none [none]		 Win2K-f 1 of 43 23:47:01 23:47:01 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3df86eba85
NEW		 f0c55dd699 [0] WinXP 41 of 42 14:57:14 14:57:14 1 none none:none
 PolyEnE| none trace
d8040f84d4
NEW		 d683995e84 [0] WinXP 39 of 41 16:59:30 16:59:30 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
10eebdc28e
NEW		 e2ca2da35d [0] WinXP 38 of 41 00:28:23 00:28:23 1 none ASM:Graph
 Armadillo| 0% lines=91 trace
a3b217d38a
NEW		 f87b27ab2c [0] Win2K-f 38 of 41 16:35:52 16:35:52 1 none ASM:Graph
 tElock| 96% lines=64
embedded dns		 trace
f3a1894898
NEW		 none[none] WinXP 41 of 41 12:53:11 13:02:33 2 none none:none
 none|none none none
5e8ccc4190
NEW		 8d5f86583f [0] WinXP 39 of 40 04:00:19 11:24:17 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
0b951c2832
NEW
e4ed4df0f0
NEW		 5fe761661a [0]
de471fc380[0]		 Win2K-f 34 of 36 09:25:59 09:25:59 1 none ASM:Graph
ASM:Graph
 Armadillo|
tElock|		 96% lines=91
lines=64
embedded dns		 trace
trace
18d5ebebab
NEW
2382c263f9
NEW
426ecca5d8
NEW
531f3ee3d1
NEW
92b7f99e20
NEW
b34dda1468
NEW
b34e640329
NEW
e895dc9399
NEW
ec7cec691c
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 40 of 43 23:20:25 23:20:25 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none
none
none		 none
none
none
none
none
none
none
none
none
a0139d7ad8
NEW		 none[0] WinXP 29 of 29 00:44:03 00:44:03 1 none none:none
 PolyEnE| 99% lines=68 trace
fb9ac9731d
NEW		 none[none] Win2K-f 2 of 42 23:39:54 23:39:54 1 none none:none
 none|none none none
ef96217736
NEW		 none[none] WinXP 42 of 43 09:17:52 09:17:52 1 none none:none
 none|none none none
0922e0c3fe
NEW		 none[none] WinXP 39 of 42 12:21:21 12:21:21 1 none none:none
 none|none none none
d9cb288f31
NEW		 45603a001c [0] Win2K-f 3 of 37 05:40:14 05:48:57 2 none ASM:Graph
 UPX| 92% lines=174
embedded dns		 trace
d031b42d3f
NEW
fa14802705
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 38 of 41 10:21:17 21:24:25 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none