Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


22 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
73f1082158
[Firefox:43 hits: 06-18 to 06-21]		 none[4]
73f1082158[1]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 01:30:39 19:34:09 7 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3984f311ae
NEW		 none [4] Win2K-f 30 of 32 20:06:42 20:06:42 1 none:none
 tElock| none trace
f58222344f
[Firefox:13 hits: 12-31 to 06-20]		 2a56436a64 [0] WinXP 28 of 31 04:32:07 04:32:07 1 ASM:Graph
 PolyEnE| 54% lines=265
embedded dns		 trace
53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]		 none [4] Win2K-f
WinXP		 33 of 33 00:52:02 21:51:02 17 none:none
 tElock| none trace
8a75955033
NEW
9276c8b36b
NEW		 none[4]
9276c8b36b[1]
9276c8b36b[1]		 Win2K-f 28 of 32 05:34:52 05:34:52 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
07fabc79ef
NEW		 07fabc79ef [1] Win2K-f 0 of 32 00:52:02 00:52:02 1 ASM:Graph
 Armadillo| 47% lines=81 trace
6c36e19037
NEW		 none [4] WinXP 27 of 32 05:55:08 05:55:08 1 none:none
 none|none none trace
ed6e30072f
NEW		 none [4] WinXP 31 of 31 02:33:32 02:33:56 2 none:none
 PolyEnE| none trace
0537139fe7
[Firefox: 2 hits: 06-21 to 06-21]		 none [4] WinXP 31 of 33 22:19:16 22:19:16 1 none:none
 PolyEnE| none trace
27b945de66
NEW		 none [4] WinXP 31 of 32 00:45:55 08:01:26 2 none:none
 none|none none trace
7d1b06e856
NEW
df312ddc90
NEW		 none[4]
df312ddc90[1]
df312ddc90[1]		 WinXP 28 of 32 17:49:24 17:49:24 1 none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
9755a5d861
NEW		 none[4]
9755a5d861[1]
9755a5d861[1]		 Win2K-f 29 of 33 11:42:46 11:42:46 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
168aab35a3
[Firefox:12 hits: 06-17 to 06-21]		 none [4] WinXP 31 of 33 05:14:37 05:14:37 1 none:none
 tElock| none trace
bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18]
e53a9ea82e
[Firefox: 2 hits: 06-18 to 06-18]		 none[4]
e53a9ea82e[1]
e53a9ea82e[1]		 WinXP 23 of 33 00:49:18 00:49:18 1 none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
6887c0c417
[Firefox:10 hits: 08-17 to 03-20]		 0a9bea2750 [0] WinXP 25 of 29 05:16:42 05:16:42 1 ASM:Graph
 FSG| 93% lines=1932
embedded dns		 trace
475d9a7753
NEW		 none [4] WinXP 30 of 32 02:07:27 02:07:27 1 none:none
 tElock| none trace
d42c1cc7c0
[Firefox:301 hits: 05-01 to 06-21]		 af9ca5bed1 [0] WinXP 29 of 29 12:44:13 12:44:13 1 ASM:Graph
 PolyEnE| 100% lines=54 trace
bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18]		 none [4] WinXP 31 of 32 00:49:18 00:49:18 1 none:none
 PolyEnE| none trace
53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
73f1082158
[Firefox:43 hits: 06-18 to 06-21]
e07c29c4ae
[Firefox:22 hits: 06-19 to 06-21]		 none[4]
73f1082158[1]
e07c29c4ae[1]
e07c29c4ae[1]		 WinXP 0 of 33 03:29:53 17:41:49 2 none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
721088fe83
NEW		 none [4] WinXP 30 of 32 01:15:27 01:15:27 1 none:none
 FSG| none trace
3984f311ae
NEW
bfa18c4273
NEW		 none[4]
bfa18c4273[1]
bfa18c4273[1]		 Win2K-f 29 of 32 20:06:42 20:06:42 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
8a75955033
NEW		 none [4] Win2K-f 29 of 32 05:34:52 05:34:52 1 none:none
 tElock| none trace
21e5edb96d
[Firefox: 3 hits: 06-19 to 06-21]		 none [4] WinXP 31 of 33 12:42:09 15:14:50 2 none:none
 none|none none trace
3cd7958258
[Firefox: 2 hits: 06-17 to 06-19]		 none [4] WinXP 30 of 33 05:25:06 05:25:06 1 none:none
 tElock| none trace
0537139fe7
[Firefox: 2 hits: 06-21 to 06-21]
49b6f2dd5d
[Firefox: 2 hits: 06-21 to 06-21]		 none[4]
49b6f2dd5d[1]
49b6f2dd5d[1]		 WinXP 29 of 33 22:19:16 22:19:16 1 none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
7fdfe363d5
[Firefox:2679 hits: 12-31 to 06-21]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 01:49:05 16:49:59 12 ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:16 hits: 06-17 to 06-21]		 4c3df24b32 [1] WinXP 0 of 33 03:32:43 13:19:16 3 ASM:Graph
 Armadillo| 47% lines=81 trace
7f60162c2c
[Firefox:1343 hits: 12-31 to 06-21]		 1aad8e4632 [0] WinXP 25 of 25 14:12:03 14:12:03 1 ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
741e3b03b3
[Firefox:52 hits: 09-28 to 06-21]		 e0197e8a64 [0] WinXP 31 of 32 05:41:34 21:29:18 3 ASM:Graph
 none|none 100% lines=62 trace
3cd7958258
[Firefox: 2 hits: 06-17 to 06-19]
41efedf70f
NEW		 none[4]
41efedf70f[1]
41efedf70f[1]		 WinXP 28 of 32 05:25:06 05:25:06 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
831f4ee0a7
[Firefox:653 hits: 07-11 to 06-21]		 eb7546c600 [0] WinXP 29 of 29 01:57:17 05:14:09 2 ASM:Graph
 none|none 100% lines=61 trace
a1a5fa95b9
NEW		 none [4] WinXP 29 of 32 02:42:58 02:42:58 1 none:none
 tElock| none trace
a1a5fa95b9
NEW
e655846fa1
NEW		 none[4]
e655846fa1[1]
e655846fa1[1]		 WinXP 28 of 32 02:42:58 02:42:58 1 none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
1898e66cd2
[Firefox: 2 hits: 05-20 to 05-21]		 none [4] WinXP 31 of 32 08:01:06 08:01:06 1 none:none
 PolyEnE| none trace
17028f1eda
[Firefox:11 hits: 09-29 to 06-21]		 none [3] WinXP 31 of 32 18:05:27 18:05:27 1 none:none
 tElock| none trace
7d99b0e910
[Firefox:3077 hits: 12-31 to 06-21]		 7a70e1b592 [0] WinXP 26 of 28 07:46:15 15:44:13 2 ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
9755a5d861
NEW
b5919931fe
[Firefox:17 hits: 06-20 to 06-21]		 none[4]
9755a5d861[1]
b5919931fe[1]
b5919931fe[1]		 Win2K-f 0 of 32 01:38:58 11:42:46 3 none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
8acd7e1937
NEW		 8a