Multiperspective Malware Analysis Page - SRI Honeynet - Cumulative Malware Binary DIGEST Dictionary<br><br>PUBLIC PAGE

Welcome to the Cyber-TA
SRI Honeynet - Cumulative Malware Binary DIGEST Dictionary

PUBLIC PAGE

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Track
Execution

1 00044c5c27
NEW none [none] Win2K-f 35 of 36 none:none
none|none 0% none none

2 0008f45bb2
NEW none [none] WinXP 0 of 36 none:none
none|none 0% none none

3 000e599b02
[Firefox: 3 hits: 10-22 to 11-07] none [none] WinXP
Win2K-f 30 of 36 none:none
none|none 0% none none

4 00113a60ab
NEW none [none] Win2K-f 33 of 35 none:none
none|none 0% none none

5 001b6f7107
[Firefox: 3 hits: 07-29 to 08-02] none [none] WinXP 35 of 35 none:none
none|none 0% none none

6 0022c74e8a
NEW none [none] Win2K-f WinXP 0 of 0 none:none
none|none 0% none none

7 002d16e284
NEW b56fb31377 [0] WinXP 30 of 32 ASM:Graph
PolyEnE| 100% lines=129 trace

8 002eb58800
NEW none [none] WinXP 0 of 33 none:none
none|none 0% none none

9 00374ffbda
NEW none [3] Win2K-f 23 of 32 none:none
none|none 0% none trace

10 00392af02f
[Firefox: 2 hits: 07-03 to 07-03] none [none] Win2K-f
WinXP 27 of 32 none:none
none|none 0% none none

11 005226ccd5
[Firefox: 5 hits: 08-09 to 08-12] none [none] Win2K-f Win2K-f
WinXP WinXP
Win2K-f 30 of 36 none:none
none|none 0% none none

12 006e2b5e76
NEW 43a64a8285 [0] WinXP 31 of 32 ASM:Graph
PolyEnE| 99% lines=68 trace

13 00710a2ffa
[Firefox: 2 hits: 06-28 to 06-30] none [none] WinXP Win2K-f 31 of 32 none:none
none|none 0% none none

14 007e359dda
NEW none [none] Win2K-f 21 of 36 none:none
none|none 0% none none

15 008124ebe0
NEW none [none] WinXP 27 of 32 none:none
none|none 0% none none

16 0081629431
NEW none [none] Win2K-f 34 of 36 none:none
none|none 0% none none

17 0081841647
NEW none [none] Win2K-f 33 of 36 none:none
none|none 0% none none

18 00835ad53f
NEW none [none] WinXP 0 of 0 none:none
none|none 0% none none

19 0094557189
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

20 00a6ffb6f1
NEW none [3] Win2K-f 26 of 32 none:none
none|none 0% none trace

21 00adf9a537
NEW none [none] WinXP 0 of 36 none:none
none|none 0% none none

22 00b268f5a1
NEW none [none] WinXP 35 of 35 none:none
none|none 0% none none

23 00b7e57d8b
NEW none [none] Win2K-f WinXP 32 of 35 none:none
none|none 0% none none

24 00be9a9d63
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

25 00c93dc3f1
[Firefox: 2 hits: 05-01 to 05-05] 8783ead907 [0] WinXP 29 of 31 ASM:Graph
PolyEnE| 100% lines=129 trace

26 00dd9f9a73
NEW none [none] WinXP Win2K-f 33 of 35 none:none
none|none 0% none none

27 00de373b4a
[Firefox: 2 hits: 07-12 to 07-21] none [none] Win2K-f 32 of 33 none:none
none|none 0% none none

28 00fbad48e5
NEW none [4] WinXP 0 of 0 none:none
tElock| 0% none trace

29 01110cd0bb
[Firefox: 2 hits: 04-08 to 04-09] 01110cd0bb [1] Win2K-f 30 of 32 ASM:Graph
Armadillo| 36% lines=6 trace

30 0115338c8b
[Firefox:34 hits: 09-12 to 11-08] none [none] Win2K-f
WinXP 33 of 36 none:none
none|none 0% none none

31 011af15e19
[Firefox: 2 hits: 08-01 to 08-02] none [none] WinXP Win2K-f Win2K-f
WinXP 32 of 36 none:none
none|none 0% none none

32 0144eaab60
NEW none [none] Win2K-f 31 of 33 none:none
none|none 0% none none

33 01471a5b7b
NEW none [none] WinXP 18 of 33 none:none
none|none 0% none none

34 01506e22fa
[Firefox: 2 hits: 05-01 to 05-01] none [4] Win2K-f 22 of 30 none:none
none|none 0% none trace

35 015b4e0fc9
NEW none [none] WinXP 0 of 0 none:none
none|none 0% none none

36 015d6caf28
NEW none [none] WinXP 21 of 36 none:none
none|none 0% none none

37 0166655ec3
NEW f2116f85eb [0] Win2K-f 29 of 32 ASM:Graph
FSG| 93% lines=1932
embedded dns trace

38 017226a316
[Firefox: 3 hits: 07-27 to 08-13] none [none] WinXP Win2K-f 33 of 35 none:none
none|none 0% none none

39 01735c8b67
NEW 11a5cb7c50 [0] WinXP 28 of 32 ASM:Graph
PolyEnE| 100% lines=68 trace

40 017f3b2704
[Firefox: 3 hits: 10-26 to 10-28] none [none] WinXP 34 of 35 none:none
none|none 0% none none

41 018066960e
NEW none [none] Win2K-f 29 of 36 none:none
none|none 0% none none

42 018b5e869b
NEW none [none] Win2K-f 9 of 33 none:none
none|none 0% none none

43 018b7b7e27
[Firefox: 4 hits: 10-16 to 10-16] none [none] Win2K-f WinXP 0 of 0 none:none
none|none 0% none none

44 018dbe7c7e
NEW none [none] WinXP 36 of 37 none:none
none|none 0% none none

45 0197c6c127
[Firefox: 2 hits: 04-27 to 04-30] none [4] Win2K-f 28 of 32 none:none
none|none 0% none trace

46 01a7279cd0
NEW none [4] WinXP 27 of 30 none:none
none|none 0% none trace

47 01af816288
NEW none [none] WinXP 35 of 36 none:none
none|none 0% none none

48 01b550bb9b
NEW none [3] Win2K-f 28 of 32 none:none
PolyEnE| 0% none trace

49 01c4229e55
NEW none [4] Win2K-f 13 of 31 none:none
none|none 0% none trace

50 01ccd8c1fd
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

51 01d27308e9
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

52 01d3d30b02
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

53 01d97967d2
NEW none [none] Win2K-f 32 of 36 none:none
none|none 0% none none

54 01dcca5633
NEW none [none] WinXP 32 of 36 none:none
none|none 0% none none

55 01ee5f87d9
NEW none [none] WinXP 27 of 36 none:none
none|none 0% none none

56 01ef605039
NEW none [none] Win2K-f WinXP 32 of 33 none:none
none|none 0% none none

57 01efbb6280
NEW none [none] WinXP 32 of 33 none:none
none|none 0% none none

58 01f8daa481
NEW none [none] Win2K-f 0 of 0 none:none
Armadillo| 0% none none

59 02050fca41
NEW none [3] Win2K-f 23 of 32 none:none
none|none 0% none trace

60 021884fd26
NEW none [none] WinXP
Win2K-f 34 of 36 none:none
none|none 0% none none

61 0237de298e
NEW none [none] WinXP 21 of 35 none:none
none|none 0% none none

62 023977790d
NEW none [none] WinXP Win2K-f 32 of 36 none:none
none|none 0% none none

63 0242a9175c
NEW none [none] WinXP 34 of 36 none:none
none|none 0% none none

64 02454bcd87
NEW none [none] WinXP
Win2K-f 23 of 32 none:none
none|none 0% none trace

65 0253aba4c7
NEW none [3] Win2K-f 24 of 32 none:none
none|none 0% none trace

66 0256a5a5ce
NEW none [none] WinXP 0 of 0 none:none
none|none 0% none none

67 027bb34b9f
NEW none [3] WinXP 23 of 32 none:none
none|none 0% none trace

68 028454d36b
NEW none [none] WinXP 31 of 32 none:none
none|none 0% none none

69 028f316535
NEW none [none] Win2K-f 29 of 36 none:none
none|none 0% none none

70 0294c2d895
NEW none [4] Win2K-f 28 of 32 none:none
none|none 0% none trace

71 02b1d27c8f
NEW none [none] Win2K-f 0 of 0 none:none
none|none 0% none none

72 02c3f4a6f5
NEW none [none] WinXP

	Packed MD5	UnPacket MD5	Victim OS	AntiVirus Hit-Cnt	Behavioral Clusters	Unpacked Egg.asm	Packer Fingerprint	API Resolution	String Cnt	Track Execution
1	00044c5c27 NEW	none [none]	Win2K-f	35 of 36		none:none	none\|none	0%	none	none
2	0008f45bb2 NEW	none [none]	WinXP	0 of 36		none:none	none\|none	0%	none	none
3	000e599b02 [Firefox: 3 hits: 10-22 to 11-07]	none [none]	WinXP Win2K-f	30 of 36		none:none	none\|none	0%	none	none
4	00113a60ab NEW	none [none]	Win2K-f	33 of 35		none:none	none\|none	0%	none	none
5	001b6f7107 [Firefox: 3 hits: 07-29 to 08-02]	none [none]	WinXP	35 of 35		none:none	none\|none	0%	none	none
6	0022c74e8a NEW	none [none]	Win2K-f WinXP	0 of 0		none:none	none\|none	0%	none	none
7	002d16e284 NEW	b56fb31377 [0]	WinXP	30 of 32		ASM:Graph	PolyEnE\|	100%	lines=129	trace
8	002eb58800 NEW	none [none]	WinXP	0 of 33		none:none	none\|none	0%	none	none
9	00374ffbda NEW	none [3]	Win2K-f	23 of 32		none:none	none\|none	0%	none	trace
10	00392af02f [Firefox: 2 hits: 07-03 to 07-03]	none [none]	Win2K-f WinXP	27 of 32		none:none	none\|none	0%	none	none
11	005226ccd5 [Firefox: 5 hits: 08-09 to 08-12]	none [none]	Win2K-f Win2K-f WinXP WinXP Win2K-f	30 of 36		none:none	none\|none	0%	none	none
12	006e2b5e76 NEW	43a64a8285 [0]	WinXP	31 of 32		ASM:Graph	PolyEnE\|	99%	lines=68	trace
13	00710a2ffa [Firefox: 2 hits: 06-28 to 06-30]	none [none]	WinXP Win2K-f	31 of 32		none:none	none\|none	0%	none	none
14	007e359dda NEW	none [none]	Win2K-f	21 of 36		none:none	none\|none	0%	none	none
15	008124ebe0 NEW	none [none]	WinXP	27 of 32		none:none	none\|none	0%	none	none
16	0081629431 NEW	none [none]	Win2K-f	34 of 36		none:none	none\|none	0%	none	none
17	0081841647 NEW	none [none]	Win2K-f	33 of 36		none:none	none\|none	0%	none	none
18	00835ad53f NEW	none [none]	WinXP	0 of 0		none:none	none\|none	0%	none	none
19	0094557189 NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
20	00a6ffb6f1 NEW	none [3]	Win2K-f	26 of 32		none:none	none\|none	0%	none	trace
21	00adf9a537 NEW	none [none]	WinXP	0 of 36		none:none	none\|none	0%	none	none
22	00b268f5a1 NEW	none [none]	WinXP	35 of 35		none:none	none\|none	0%	none	none
23	00b7e57d8b NEW	none [none]	Win2K-f WinXP	32 of 35		none:none	none\|none	0%	none	none
24	00be9a9d63 NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
25	00c93dc3f1 [Firefox: 2 hits: 05-01 to 05-05]	8783ead907 [0]	WinXP	29 of 31		ASM:Graph	PolyEnE\|	100%	lines=129	trace
26	00dd9f9a73 NEW	none [none]	WinXP Win2K-f	33 of 35		none:none	none\|none	0%	none	none
27	00de373b4a [Firefox: 2 hits: 07-12 to 07-21]	none [none]	Win2K-f	32 of 33		none:none	none\|none	0%	none	none
28	00fbad48e5 NEW	none [4]	WinXP	0 of 0		none:none	tElock\|	0%	none	trace
29	01110cd0bb [Firefox: 2 hits: 04-08 to 04-09]	01110cd0bb [1]	Win2K-f	30 of 32		ASM:Graph	Armadillo\|	36%	lines=6	trace
30	0115338c8b [Firefox:34 hits: 09-12 to 11-08]	none [none]	Win2K-f WinXP	33 of 36		none:none	none\|none	0%	none	none
31	011af15e19 [Firefox: 2 hits: 08-01 to 08-02]	none [none]	WinXP Win2K-f Win2K-f WinXP	32 of 36		none:none	none\|none	0%	none	none
32	0144eaab60 NEW	none [none]	Win2K-f	31 of 33		none:none	none\|none	0%	none	none
33	01471a5b7b NEW	none [none]	WinXP	18 of 33		none:none	none\|none	0%	none	none
34	01506e22fa [Firefox: 2 hits: 05-01 to 05-01]	none [4]	Win2K-f	22 of 30		none:none	none\|none	0%	none	trace
35	015b4e0fc9 NEW	none [none]	WinXP	0 of 0		none:none	none\|none	0%	none	none
36	015d6caf28 NEW	none [none]	WinXP	21 of 36		none:none	none\|none	0%	none	none
37	0166655ec3 NEW	f2116f85eb [0]	Win2K-f	29 of 32		ASM:Graph	FSG\|	93%	lines=1932 embedded dns	trace
38	017226a316 [Firefox: 3 hits: 07-27 to 08-13]	none [none]	WinXP Win2K-f	33 of 35		none:none	none\|none	0%	none	none
39	01735c8b67 NEW	11a5cb7c50 [0]	WinXP	28 of 32		ASM:Graph	PolyEnE\|	100%	lines=68	trace
40	017f3b2704 [Firefox: 3 hits: 10-26 to 10-28]	none [none]	WinXP	34 of 35		none:none	none\|none	0%	none	none
41	018066960e NEW	none [none]	Win2K-f	29 of 36		none:none	none\|none	0%	none	none
42	018b5e869b NEW	none [none]	Win2K-f	9 of 33		none:none	none\|none	0%	none	none
43	018b7b7e27 [Firefox: 4 hits: 10-16 to 10-16]	none [none]	Win2K-f WinXP	0 of 0		none:none	none\|none	0%	none	none
44	018dbe7c7e NEW	none [none]	WinXP	36 of 37		none:none	none\|none	0%	none	none
45	0197c6c127 [Firefox: 2 hits: 04-27 to 04-30]	none [4]	Win2K-f	28 of 32		none:none	none\|none	0%	none	trace
46	01a7279cd0 NEW	none [4]	WinXP	27 of 30		none:none	none\|none	0%	none	trace
47	01af816288 NEW	none [none]	WinXP	35 of 36		none:none	none\|none	0%	none	none
48	01b550bb9b NEW	none [3]	Win2K-f	28 of 32		none:none	PolyEnE\|	0%	none	trace
49	01c4229e55 NEW	none [4]	Win2K-f	13 of 31		none:none	none\|none	0%	none	trace
50	01ccd8c1fd NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
51	01d27308e9 NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
52	01d3d30b02 NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
53	01d97967d2 NEW	none [none]	Win2K-f	32 of 36		none:none	none\|none	0%	none	none
54	01dcca5633 NEW	none [none]	WinXP	32 of 36		none:none	none\|none	0%	none	none
55	01ee5f87d9 NEW	none [none]	WinXP	27 of 36		none:none	none\|none	0%	none	none
56	01ef605039 NEW	none [none]	Win2K-f WinXP	32 of 33		none:none	none\|none	0%	none	none
57	01efbb6280 NEW	none [none]	WinXP	32 of 33		none:none	none\|none	0%	none	none
58	01f8daa481 NEW	none [none]	Win2K-f	0 of 0		none:none	Armadillo\|	0%	none	none
59	02050fca41 NEW	none [3]	Win2K-f	23 of 32		none:none	none\|none	0%	none	trace
60	021884fd26 NEW	none [none]	WinXP Win2K-f	34 of 36		none:none	none\|none	0%	none	none
61	0237de298e NEW	none [none]	WinXP	21 of 35		none:none	none\|none	0%	none	none
62	023977790d NEW	none [none]	WinXP Win2K-f	32 of 36		none:none	none\|none	0%	none	none
63	0242a9175c NEW	none [none]	WinXP	34 of 36		none:none	none\|none	0%	none	none
64	02454bcd87 NEW	none [none]	WinXP Win2K-f	23 of 32		none:none	none\|none	0%	none	trace
65	0253aba4c7 NEW	none [3]	Win2K-f	24 of 32		none:none	none\|none	0%	none	trace
66	0256a5a5ce NEW	none [none]	WinXP	0 of 0		none:none	none\|none	0%	none	none
67	027bb34b9f NEW	none [3]	WinXP	23 of 32		none:none	none\|none	0%	none	trace
68	028454d36b NEW	none [none]	WinXP	31 of 32		none:none	none\|none	0%	none	none
69	028f316535 NEW	none [none]	Win2K-f	29 of 36		none:none	none\|none	0%	none	none
70	0294c2d895 NEW	none [4]	Win2K-f	28 of 32		none:none	none\|none	0%	none	trace
71	02b1d27c8f NEW	none [none]	Win2K-f	0 of 0		none:none	none\|none	0%	none	none
72	02c3f4a6f5 NEW	none [none]	WinXP