Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


01 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6963c6db10
NEW		 c35c26ab4d [0] Win2K-f 28 of 31 13:55:56 13:55:56 1 none ASM:Graph
 StarForce| 77% lines=158 trace
a107502d71
[Firefox: 2 hits: 05-01 to 05-07]		 none[4] WinXP 27 of 30 20:55:39 20:55:39 1 none none:none
 none|none none trace
206797614d
[Firefox: 3 hits: 05-01 to 05-17]		 none[4] Win2K-f
WinXP		 24 of 30 13:20:01 23:05:20 2 none none:none
 Obsidium| none trace
e9740e4dd9
NEW		 41904b687c [0] Win2K-f 18 of 31 10:30:13 10:30:13 1 none ASM:Graph
 TXT2COM| 59% lines=407
embedded dns		 trace
f515fcc0f7
[Firefox:14 hits: 12-28 to 05-14]		 dc7696e295 [0] WinXP 14 of 32 07:59:03 07:59:03 1 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
0aecd734ef
NEW		 none[4] Win2K-f 27 of 31 08:02:27 08:02:27 1 none none:none
 none|none none trace
f2db9507a5
[Firefox: 3 hits: 04-27 to 05-01]		 none[4] WinXP 22 of 31 16:26:23 16:26:23 1 none none:none
 none|none none trace
01506e22fa
[Firefox: 2 hits: 05-01 to 05-01]		 none[4] Win2K-f 22 of 30 12:34:25 20:45:51 2 none none:none
 none|none none trace
43aaa8723f
NEW		 none[4] WinXP 25 of 28 17:02:07 17:02:07 1 none none:none
 none|none none trace
21cf7ee399
NEW		 none[4] WinXP 0 of 0 11:02:20 11:02:20 1 none none:none
 none|none none trace
af98fe0c94
[Firefox:71 hits: 04-27 to 05-21]		 480d076a0a [0] Win2K-f
WinXP		 20 of 31 05:30:12 23:59:09 4 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
918ef43f66
NEW		 f201d20da9 [0] WinXP 31 of 31 13:12:08 13:12:08 1 none ASM:Graph
 PolyEnE| 99% lines=129 trace
bd7864188f
[Firefox: 3 hits: 04-28 to 05-02]		 9d2956530a [0] Win2K-f 25 of 32 11:47:16 11:47:16 1 none ASM:Graph
 ASProtect| 3% lines=393
embedded dns		 trace
a12cab51ef
[Firefox:1025 hits: 05-01 to 05-21]		 40f7f463c4 [0] WinXP 29 of 29 21:49:22 21:49:22 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f3c3478952
[Firefox: 3 hits: 04-30 to 05-17]		 none[4] Win2K-f 21 of 31 10:13:38 10:13:38 1 none none:none
 none|none none trace
608d4c1595
[Firefox: 2 hits: 05-01 to 05-09]		 none[4] WinXP 19 of 31 03:06:44 03:06:44 1 none none:none
 none|none none trace
6c9c940a07
NEW		 none[4] Win2K-f 10 of 32 16:55:43 16:55:43 1 none none:none
 none|none none trace
00c93dc3f1
[Firefox: 2 hits: 05-01 to 05-05]		 8783ead907 [0] WinXP 29 of 31 16:34:09 16:34:09 1 none ASM:Graph
 PolyEnE| 100% lines=129 trace
639a247ece
[Firefox:32 hits: 04-28 to 05-18]		 29d53eec72 [0] WinXP
Win2K-f		 10 of 32 06:13:26 16:02:29 3 none ASM:Graph
 StarForce| 77% lines=132 trace
7fdfe363d5
[Firefox:2633 hits: 12-31 to 05-19]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 08:09:12 20:06:15 2 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
7dbe494a3d
[Firefox: 2 hits: 05-01 to 05-02]		 none[4] Win2K-f 23 of 32 14:37:14 14:37:14 1 none none:none
 none|none none trace
84cf854398
[Firefox: 6 hits: 03-20 to 05-01]		 7946093a4e [0] WinXP 14 of 32 00:17:52 00:17:52 1 none ASM:Graph
 StarForce| 100% lines=19 trace
ccf7ce9bb5
[Firefox: 4 hits: 05-01 to 05-18]		 none[4] Win2K-f 12 of 30 00:48:54 00:48:54 1 none none:none
 none|none none trace
84cf854398
[Firefox: 6 hits: 03-20 to 05-01]
91e84b3054
NEW
ab989d919b
NEW		 7946093a4e [0]
none [3]
e9809758bb[0]		 WinXP 14 of 31 00:17:52 00:17:52 1 none ASM:Graph
none:none
none:none
 StarForce|
none|none
none|none		 lines=19
none
none		 trace
trace
trace
dfc9c1cbbb
NEW		 none[4] Win2K-f 27 of 31 19:52:48 19:52:48 1 none none:none
 none|none none trace
29f0569b6b
[Firefox: 7 hits: 02-04 to 05-01]		 025d039154 [0] Win2K-f 20 of 32 04:42:10 04:42:10 1 none ASM:Graph
 PEEncrypt| 68% lines=485
embedded dns		 trace
83684a9b28
NEW		 none[4] Win2K-f 26 of 31 14:28:45 14:28:45 1 none none:none
 none|none none trace
5f78ff609d
[Firefox:1414 hits: 04-27 to 05-21]		 d4a06bdc3a [0] WinXP
Win2K-f		 21 of 32 00:29:52 23:54:51 126 none ASM:Graph
 none|none 46% lines=4 trace
6fd562b88c
NEW		 none[3] WinXP 29 of 31 04:23:49 04:23:49 1 none none:none
 ASPack| none trace
d556805322
NEW		 none[4] Win2K-f 28 of 31 02:57:58 02:57:58 1 none none:none
 none|none none trace
b38a7b19d3
[Firefox: 2 hits: 05-01 to 05-05]		 none[4] Win2K-f 27 of 32 13:10:18 13:10:18 1 none none:none
 none|none none trace
dc8e1c63cd
[Firefox:95 hits: 12-27 to 05-21]		 e0eb8646ee [0] Win2K-f 22 of 32 08:35:09 22:00:58 2 none ASM:Graph
 none|none 62% lines=601
embedded dns		 trace
58cf19dc17
NEW		 none[4] Win2K-f 27 of 30 09:26:10 09:26:10 1 none none:none
 none|none none trace
84cf854398
[Firefox: 6 hits: 03-20 to 05-01]
91e84b3054
NEW
ab989d919b
NEW
d930d42d12
[Firefox: 2 hits: 04-30 to 05-01]		 7946093a4e [0]
none [3]
e9809758bb[0]
none [3]		 WinXP 29 of 32 00:17:52 00:17:52 1 none ASM:Graph
none:none
none:none
none:none
 StarForce|
none|none
none|none
ASPack|		 lines=19
none
none
none		 trace
trace
trace
trace
890fb4fa10
[Firefox:43 hits: 12-27 to 05-10]		 b9c7f08a57 [0] Win2K-f 19 of 32 21:43:15 21:43:15 1 none ASM:Graph
 ASProtect| 3% lines=393
embedded dns		 trace
07e23ff778
[Firefox: 2 hits: 05-01 to 05-05]		 e6c4bf7726 [0] Win2K-f 28 of 32 01:33:57 01:33:57 1 none ASM:Graph
 StarForce| 77% lines=131 trace
1a2c0e6130
[Firefox:393 hits: 12-31 to 05-21]		 048df78048 [0] WinXP 29 of 29 06:04:36 06:04:36 1 none ASM:Graph
 none|none 100% lines=61 trace
ab6c69927d
NEW		 none[4] Win2K-f 29 of 32 09:08:09 09:08:09 1 none none:none
 none|none none trace
9bc965e365
NEW		 none[4] Win2K-f 25 of 30 22:19:52 22:19:52 1 none none:none
 none|none none trace
56ae35572e
[Firefox: 3 hits: 05-01 to 05-10]		 none[4] Win2K-f 27 of 31 18:28:54 18:28:54 1 none none:none
 none|none none trace
9345b57563
[Firefox:15 hits: 12-27 to 05-21]		 none[4] Win2K-f 9 of 32 20:10:10 20:10:10 1 none none:none
 none|none none trace
9087717639
NEW		 none[4] Win2K-f 26 of 30 14:05:24 14:05:24 1 none none:none
 none|none none trace
fde6753cd2
[Firefox: 2 hits: 04-16 to 05-01]		 ca2ee8500c [0] WinXP 31 of 32 04:36:18 04:36:18 1 none ASM:Graph
 PolyEnE| 99% lines=136 trace
8ae058b2d0
NEW		 e6a9383b75 [0] WinXP 30 of 32 15:12:19 15:12:19 1 none ASM:Graph
 none|none 97% lines=59 trace
854ae50650
NEW		 none[4] Win2K-f 21 of 32 14:39:57 14:39:57 1 none none:none
 none|none none trace
84cf854398
[Firefox: 6 hits: 03-20 to 05-01]
91e84b3054
NEW		 7946093a4e [0]
none [3]		 WinXP 13 of 31 00:17:52 00:17:52 1 none ASM:Graph
none:none
 StarForce|
none|none		 lines=19
none		 trace
trace
fd3d613e8b
NEW		 none[4] WinXP 26 of 30 02:00:11 02:00:11 1 none none:none
 none|none none trace
a7e9f03e58
NEW		 none[4] WinXP 27 of 31 10:58:52 10:58:52 1 none none:none
 none|none none trace
ea97f79217
[Firefox: 2 hits: 04-30 to 05-01]		 none[4] Win2K-f 27 of 32 12:53:05 12:53:05 1 none none:none
 none|none none trace
a55f01be83
NEW		 none[4] WinXP 27 of 30 13:17:16 13:17:16 1 none none:none
 Obsidium| none trace
76b4ab852e
[Firefox:52 hits: 04-29 to 05-17]		 none[4] Win2K-f 12 of 30 00:42:44 23:22:00 2 none none:none
 none|none none trace
eb0866b6cc
NEW		 none[4] Win2K-f 26 of 31 09:36:22 09:36:22 1 none none:none
 none|none none trace
14ef234ad3
[Firefox:15 hits: 04-29 to 05-17]		 none[4] Win2K-f 23 of 31 20:11:48 20:11:48 1 none none:none
 none|none none trace
ac33159123
NEW		 none[4] WinXP 13 of 31 00:40:11 00:40:11 1 none none:none
 none|none none trace
97c46fc293
NEW		 55dd86439b [0] Win2K-f 0 of 0 13:08:37 13:08:37 1 none ASM:Graph
 ASProtect| 62% lines=628
embedded dns		 trace
0ada72d805
[Firefox:30 hits: 05-17 to 05-08]		 239ec78f15 [0] WinXP 29 of 29 01:05:23 15:57:06 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f7a2e2c5f9
NEW		 none[4] Win2K-f 27 of 32 01:40:02 01:40:02 1 none none:none
 none|none none trace
e7adb438c8
NEW		 none[4] Win2K-f 25 of 31 09:44:55 09:44:55 1 none none:none
 none|none none trace
1e131df055
NEW		 none[4] WinXP 23 of 31 16:17:17 16:17:17 1 none none:none
 ASPack| none trace
d5fc85ade1
NEW		 none[4] Win2K-f 26 of 31 21:50:35 21:50:35 1 none none:none
 none|none none trace
cd05c2e205
NEW		 none[4] Win2K-f 26 of 31 00:26:03 00:26:03 1 none none:none
 none|none none trace
18b909f0ea
NEW		 none[4] Win2K-f 30 of 32 07:40:01 07:40:01 1 none none:none
 none|none none trace
408aea2aae
NEW		 none[4] WinXP 13 of 31 19:36:14 19:36:14 1 none none:none
 none|none none trace
7f60162c2c
[Firefox:1294 hits: 12-31 to 05-20]		 1aad8e4632 [0] WinXP 25 of 25 07:30:10 15:55:52 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
4620861e2d
[Firefox:15 hits: 04-27 to 05-17]		 none[4] Win2K-f 11 of 31 09:23:29 11:40:27 2 none none:none
 StarForce| none trace
096ec84325
NEW		 none[4] WinXP 15 of 32 10:37:41 10:37:41 1 none none:none
 none|none none trace
2cbd59e102
[Firefox:12 hits: 12-29 to 05-17]		 a3aefdb837 [0] WinXP 9 of 32 04:08:10 04:08:10 1 none ASM:Graph
 ASPack| 62% lines=607
embedded dns		 trace
7d99b0e910
[Firefox:2992 hits: 12-31 to 05-20]		 7a70e1b592 [0] WinXP 26 of 28 10:08:36 20:45:54 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7e28dac8de
[Firefox:24 hits: 04-27 to 05-21]		 none[4] WinXP 18 of 32 20:02:16 20:02:16 1 none none:none
 none|none none trace
85ec5058b0
NEW		 none[4] Win2K-f 24 of 29 03:09:26 03:09:26 1 none none:none
 none|none none trace
c1a3e57a40
[Firefox: 2 hits: 05-01 to 05-21]		 none[4] Win2K-f 28 of 31 13:49:33 13:49:33 1 none none:none
 none|none none trace
c1f12e0109
[Firefox:21 hits: 04-28 to 05-17]		 none[4] WinXP 21 of 31 03:27:40 03:27:40 1 none none:none
 none|none none trace
4053a87494
NEW		 c1d7cc8d6d [0] Win2K-f 23 of 31 11:13:40 11:13:40 1 none ASM:Graph
 TXT2COM| 59% lines=405
embedded dns		 trace
bfab284e67
[Firefox: 3 hits: 05-01 to 05-05]		 13a0c147f5 [0] Win2K-f 20 of 31 04:05:42 04:05:42 1 none ASM:Graph
 ASProtect| 57% lines=420
embedded dns		 trace
c693a711f1
[Firefox: 2 hits: 05-01 to 05-15]		 none[4] WinXP 13 of 31 10:28:56 10:28:56 1 none none:none
 none|none none trace
ab5e47bf8d
[Firefox:45 hits: 05-10 to 05-07]		 none[3] WinXP 29 of 29 13:58:47 13:58:47 1 none none:none
 ASPack| none trace
91e43fc14a
[Firefox: 6 hits: 05-01 to 05-21]		 none[4] Win2K-f
WinXP		 0 of 0 02:27:33 08:52:39 4 none none:none
 Obsidium| none trace
21bcdd8c2a
NEW		 98776a37a7 [0] Win2K-f 28 of 32 13:11:20 13:11:20 1 none ASM:Graph
 StarForce| 77% lines=221
embedded dns		 trace
9c9c104141
NEW		 none[4] WinXP 26 of 31 02:13:01 02:13:01 1 none none:none
 none|none none trace
d1f07d95e4
[Firefox: 2 hits: 05-01 to 05-15]		 none[4] WinXP 26 of 32 01:22:58 01:22:58 1 none none:none
 none|none none trace
7d01c17927
NEW		 none[4] Win2K-f 29 of 31 09:43:49 09:43:49 1 none none:none
 none|none none trace
db591d7cae
NEW		 none[4] Win2K-f 27 of 31 21:20:13 21:20:13 1 none none:none
 none|none none trace