Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

04 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
8cf35e2a50
NEW none [4]
none [none] WinXP 31 of 33 03:01:44 03:01:44 1 none:none
none:none
tElock|
none|none none
none trace
none

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
73f1082158
[Firefox:163 hits: 06-18 to 07-03] none[4]
73f1082158[1]
73f1082158[1] Win2K-f
WinXP 0 of 32 00:49:18 19:40:03 11 none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

b068451179
NEW
b959a8bf1f
NEW none [none]
none [none] WinXP 31 of 33 23:22:53 23:22:53 1 none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03] none [4] Win2K-f
WinXP 33 of 33 00:21:36 22:59:22 24 none:none
tElock| none trace

4e09d669b4
NEW none [none] Win2K-f 32 of 33 11:53:35 11:53:35 1 none:none
none|none none none

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
b7082104e4
[Firefox:25 hits: 06-18 to 07-03] none [4]
none [4] WinXP 8 of 33 21:11:43 21:11:43 1 none:none
none:none
tElock|
tElock| none
none trace
trace

2e04b06527
NEW
5c054291de
NEW none[4]
5c054291de[1]
5c054291de[1] WinXP 30 of 33 10:43:21 10:43:21 1 none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

8e2a6d8756
NEW none [none] WinXP 31 of 33 19:46:58 19:46:58 1 none:none
none|none none none

168aab35a3
[Firefox:27 hits: 06-17 to 07-03] none [4] Win2K-f
WinXP 31 of 33 00:42:03 21:30:39 8 none:none
tElock| none trace

7bdeb65dd2
NEW
b5919931fe
[Firefox:53 hits: 06-20 to 07-03]
e2b84629ac
NEW none[none]
b5919931fe[1]
b5919931fe[1]
none [none] Win2K-f 31 of 33 06:51:32 06:51:32 1 none:none
ASM:Graph
none:none
none|none
ASProtect|
none|none none
lines=90
none none
trace
none

d42c1cc7c0
[Firefox:310 hits: 05-01 to 07-01] af9ca5bed1 [0] WinXP 29 of 29 00:58:20 15:55:07 2 ASM:Graph
PolyEnE| 100% lines=54 trace

2419ef9026
NEW none [none] WinXP 29 of 33 10:52:08 10:52:08 1 none:none
none|none none none

8846af9408
NEW none [none] WinXP 31 of 33 03:13:15 03:13:15 1 none:none
none|none none none

743e51a884
[Firefox: 2 hits: 07-01 to 07-03] none [none] WinXP 31 of 31 20:01:51 20:01:51 1 none:none
none|none none none

c83d445337
NEW none [none] Win2K-f 25 of 33 16:15:36 16:15:36 1 none:none
none|none none none

03f912899b
[Firefox:29 hits: 12-14 to 07-03] 83893bd25d [0] WinXP 32 of 32 14:19:06 14:19:06 1 ASM:Graph
none|none 100% lines=65 trace

36ba291c44
NEW
91301d094b
NEW none [none]
none [none] WinXP 29 of 33 08:47:37 08:47:37 1 none:none
none:none
none|none
none|none none
none none
none

9d571adc3c
NEW
a704164588
NEW none [none]
none [none] Win2K-f 31 of 33 17:00:41 17:00:41 1 none:none
none:none
none|none
none|none none
none none
none

cce9566ceb
[Firefox:16 hits: 06-12 to 07-03] none [4] WinXP 31 of 32 07:21:14 13:45:02 2 none:none
PolyEnE| none trace

fc3634d9ec
NEW none [none] Win2K-f 16 of 33 11:09:46 11:09:46 1 none:none
none|none none none

7fdfe363d5
[Firefox:2817 hits: 12-31 to 07-03] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 00:43:26 23:02:41 22 ASM:Graph
FSG| 95% lines=1933
embedded dns trace

168aab35a3
[Firefox:27 hits: 06-17 to 07-03]
4c3df24b32
[Firefox:45 hits: 06-17 to 07-03] none[4]
4c3df24b32[1]
4c3df24b32[1] Win2K-f
WinXP 0 of 33 06:22:44 11:08:48 5 none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

48bc07f9ed
[Firefox: 2 hits: 06-21 to 06-25]
a5308d87d0
[Firefox: 4 hits: 06-21 to 06-27] none[4]
a5308d87d0[1]
a5308d87d0[1] Win2K-f 29 of 33 22:32:04 22:32:04 1 none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

168aab35a3
[Firefox:27 hits: 06-17 to 07-03]
667f0c59f3
NEW none [4]
none [none] Win2K-f 31 of 33 00:42:03 00:42:03 1 none:none
none:none
tElock|
none|none none
none trace
none

6d86a1ff5a
[Firefox: 2 hits: 06-25 to 06-26] none [none] WinXP 28 of 33 12:52:53 12:52:53 1 none:none
none|none none none

6d86a1ff5a
[Firefox: 2 hits: 06-25 to 06-26]
7f6e032fc0
[Firefox: 2 hits: 06-25 to 06-26] none [none]
none [none] WinXP 31 of 33 12:52:53 12:52:53 1 none:none
none:none
none|none
none|none none
none none
none

831f4ee0a7
[Firefox:674 hits: 07-11 to 07-03] eb7546c600 [0] WinXP 29 of 29 03:09:33 18:42:38 4 ASM:Graph
none|none 100% lines=61 trace

36ba291c44
NEW none [none] WinXP 31 of 33 08:47:37 08:47:37 1 none:none
none|none none none

48bc07f9ed
[Firefox: 2 hits: 06-21 to 06-25] none [4] Win2K-f 30 of 33 22:32:04 22:32:04 1 none:none
PolyEnE| none trace

470e7533c6
NEW none [none] Win2K-f 0 of 0 10:42:07 10:42:07 1 none:none
none|none none none

f9bf3a1e43
NEW f9bf3a1e43 [1] WinXP 0 of 0 01:00:28 01:00:28 1 ASM:Graph
Armadillo| 47% lines=81 trace

168aab35a3
[Firefox:27 hits: 06-17 to 07-03]
acd2a6266d
[Firefox: 3 hits: 06-19 to 07-03] none[4]
acd2a6266d[1]
acd2a6266d[1] WinXP 30 of 33 21:30:39 21:30:39 1 none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
73f1082158
[Firefox:163 hits: 06-18 to 07-03]
b5919931fe
[Firefox:53 hits: 06-20 to 07-03] none[4]
73f1082158[1]
b5919931fe[1]
b5919931fe[1] Win2K-f 0 of 32 04:00:29 19:40:03 8 none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

2905d384e2
[Firefox: 2 hits: 07-03 to 07-03] none [none] WinXP 29 of 33 11:41:03 11:41:03 1 none:none
none|none none none

b5919931fe
[Firefox:53 hits: 06-20 to 07-03]
dd98c3c108
NEW b5919931fe [1]
dd98c3c108[1]
dd98c3c108[1] Win2K-f 29 of 33 04:00:29 10:53:07 2 ASM:Graph
ASM:Graph
ASProtect|
Armadillo| 47% lines=90
lines=82 trace
trace

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
57ce4acac2
[Firefox:33 hits: 06-17 to 07-03] none[4]
57ce4acac2[1]
57ce4acac2[1] Win2K-f 0 of 33 05:22:16 20:27:48 2 none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

c87b5f785d
NEW none [none] Win2K-f 30 of 33 17:08:39 17:08:39 1 none:none
none|none none none

8c4361f20f
NEW none [none] WinXP 32 of 33 16:08:40 16:08:40 1 none:none
none|none none none

1a2c0e6130
[Firefox:448 hits: 12-31 to 07-03] 048df78048 [0] WinXP 29 of 29 01:25:37 20:12:06 2 ASM:Graph
none|none 100% lines=61 trace

12df83cb4f
[Firefox: 4 hits: 06-19 to 06-26] 12df83cb4f [1] Win2K-f
WinXP 28 of 33 09:31:51 20:13:57 2 ASM:Graph
Armadillo| 47% lines=82 trace

1f368577c7
NEW none [none] Win2K-f 30 of 33 08:31:07 08:31:07 1 none:none
none|none none none

4ca3056804
NEW 4ca3056804 [1] Win2K-f 1 of 33 00:21:36 00:21:36 1 ASM:Graph
Armadillo| 47% lines=81 trace

53bfe15e91
[Firefox:366 hits: 06-17 to 07-03]
a08f3b74a4
[Firefox:127 hits: 06-18 to 07-03] none[4]
a08f3b74a4[