Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


02 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
83c1c4c64b
NEW		 fee9cf851f [0] Win2K-f 28 of 31 03:35:21 03:35:21 1 none ASM:Graph
 ASProtect| 57% lines=420
embedded dns		 trace
22999be88c
[Firefox: 4 hits: 04-05 to 05-02]		 eda2056971 [0] WinXP 31 of 32 18:13:53 18:13:53 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
bb39112200
[Firefox: 2 hits: 05-02 to 05-02]		 bb39112200 [1] Win2K-f 4 of 32 00:27:53 01:11:41 2 none ASM:Graph
 StarForce| 43% lines=84 trace
df17a625ee
[Firefox:438 hits: 05-04 to 05-06]		 none[3] WinXP 29 of 29 03:36:36 14:26:51 2 none none:none
 ASPack| none trace
cf34e3d41c
NEW		 none[4] Win2K-f 21 of 31 00:37:09 00:37:09 1 none none:none
 none|none none trace
dd0c0e6afb
NEW		 none[4] WinXP 22 of 30 11:27:18 11:27:18 1 none none:none
 none|none none trace
a156404fad
NEW		 none[4] WinXP 27 of 30 11:01:27 11:01:27 1 none none:none
 none|none none trace
5cad1ddb30
NEW		 none[4] Win2K-f 23 of 32 21:05:45 21:05:45 1 none none:none
 none|none none trace
35e5d8b724
NEW		 none[4] Win2K-f 26 of 32 13:52:56 13:52:56 1 none none:none
 none|none none trace
af98fe0c94
[Firefox:47 hits: 04-27 to 05-07]		 480d076a0a [0] WinXP
Win2K-f		 20 of 31 01:29:30 20:05:54 4 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
996c9c3a01
[Firefox: 6 hits: 04-03 to 05-02]		 none[3] Win2K-f 32 of 32 20:43:25 20:43:25 1 none none:none
 MEW| none trace
39b81ab576
[Firefox: 3 hits: 05-02 to 05-06]
6a1c2d773d
NEW		 7b8b096e8e [0]
9aa667b255[0]		 WinXP 19 of 31 08:06:22 08:06:22 1 none ASM:Graph
ASM:Graph
 EXECrypto|
StarForce|		 100% line=1
lines=0		 trace
trace
79d270780d
NEW		 79d270780d [1] Win2K-f 6 of 31 19:19:16 19:19:16 1 none ASM:Graph
 StarForce| 43% lines=84 trace
d42c1cc7c0
[Firefox:271 hits: 05-01 to 05-07]		 af9ca5bed1 [0] WinXP 29 of 29 17:39:45 17:39:45 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
f9b37a5ae8
[Firefox: 2 hits: 05-02 to 05-05]		 77bf267d4e [0] Win2K-f 18 of 31 04:02:49 04:02:49 1 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
bd7864188f
[Firefox: 3 hits: 04-28 to 05-02]		 9d2956530a [0] WinXP 25 of 32 00:26:40 00:26:40 1 none ASM:Graph
 ASProtect| 3% lines=393
embedded dns		 trace
9b0c5ed538
[Firefox: 3 hits: 05-02 to 05-04]		 none[4] Win2K-f 22 of 31 09:11:54 20:42:01 2 none none:none
 none|none none trace
2cf72f62c6
[Firefox: 3 hits: 05-02 to 05-06]		 none[4] Win2K-f 22 of 31 04:35:56 04:35:56 1 none none:none
 none|none none trace
0330af1285
[Firefox: 5 hits: 05-02 to 05-07]		 none[4] Win2K-f 19 of 31 01:18:42 01:18:42 1 none none:none
 none|none none trace
97f3ce0f80
[Firefox: 2 hits: 04-30 to 05-02]		 none[4] Win2K-f 28 of 31 01:01:57 01:01:57 1 none none:none
 none|none none trace
53123fadcc
[Firefox:35 hits: 01-26 to 05-07]		 none[4] WinXP 13 of 32 02:31:49 02:31:49 1 none none:none
 none|none none trace
7fdfe363d5
[Firefox:2587 hits: 12-31 to 05-07]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 06:33:48 23:56:19 9 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
639a247ece
[Firefox:24 hits: 04-28 to 05-06]		 29d53eec72 [0] WinXP 10 of 32 09:59:41 09:59:41 1 none ASM:Graph
 StarForce| 77% lines=132 trace
7dbe494a3d
[Firefox: 2 hits: 05-01 to 05-02]		 none[4] WinXP 23 of 32 05:50:38 05:50:38 1 none none:none
 none|none none trace
7f60162c2c
[Firefox:1274 hits: 12-31 to 05-07]		 1aad8e4632 [0] WinXP 25 of 25 08:06:13 16:32:46 3 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
b1bc3386f5
NEW		 none[4] WinXP 25 of 32 05:32:45 05:32:45 1 none none:none
 none|none none trace
845d4138a0
NEW		 f2a9b51fa4 [0] Win2K-f 27 of 30 01:00:58 01:00:58 1 none ASM:Graph
 none|none 57% lines=411
embedded dns		 trace
5b64aefe5d
[Firefox: 2 hits: 05-02 to 05-07]		 none[4] Win2K-f 13 of 32 03:32:23 03:32:23 1 none none:none
 none|none none trace
87a9d2fad8
NEW		 none[4] Win2K-f 12 of 30 03:14:29 03:14:29 1 none none:none
 none|none none trace
831f4ee0a7
[Firefox:576 hits: 07-11 to 05-06]		 eb7546c600 [0] WinXP 29 of 29 01:43:23 20:45:50 4 none ASM:Graph
 none|none 100% lines=61 trace
79d270780d
NEW
f0169a2083
NEW		 79d270780d [1]
a1a1659005[0]		 Win2K-f 11 of 32 19:19:16 19:19:16 1 none ASM:Graph
ASM:Graph
 StarForce|
none|none		 100% lines=84
lines=20		 trace
trace
5f78ff609d
[Firefox:825 hits: 04-27 to 05-07]		 d4a06bdc3a [0] Win2K-f
WinXP		 21 of 32 00:05:57 23:40:21 56 none ASM:Graph
 none|none 46% lines=4 trace
39b81ab576
[Firefox: 3 hits: 05-02 to 05-06]		 7b8b096e8e [0] WinXP 28 of 32 08:06:22 08:06:22 1 none ASM:Graph
 EXECrypto| 71% line=1 trace
0294c2d895
NEW		 none[4] Win2K-f 28 of 32 10:34:02 10:34:02 1 none none:none
 none|none none trace
eeaefdba25
NEW		 none[4] Win2K-f 27 of 30 04:08:22 04:08:22 1 none none:none
 none|none none trace
1c452a39ae
NEW		 none[4] WinXP 27 of 30 00:07:46 00:07:46 1 none none:none
 none|none none trace
7d99b0e910
[Firefox:2956 hits: 12-31 to 05-07]		 7a70e1b592 [0] WinXP 26 of 28 03:11:40 20:45:49 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7e28dac8de
[Firefox:11 hits: 04-27 to 05-06]		 none[4] WinXP 18 of 32 04:22:49 11:43:55 2 none none:none
 none|none none trace
5576599520
NEW		 none[4] Win2K-f 27 of 31 12:15:40 12:15:40 1 none none:none
 none|none none trace
bfab284e67
[Firefox: 3 hits: 05-01 to 05-05]		 13a0c147f5 [0] WinXP 20 of 31 01:18:45 01:18:45 1 none ASM:Graph
 ASProtect| 57% lines=420
embedded dns		 trace
fc926e0bc5
NEW		 none[4] Win2K-f 26 of 31 18:33:12 18:33:12 1 none none:none
 none|none none trace
91e43fc14a
[Firefox: 5 hits: 05-01 to 05-02]		 none[4] Win2K-f 0 of 0 20:21:21 20:21:21 1 none none:none
 Obsidium| none trace
8dbdc7465b
NEW		 96960db2de [0] Win2K-f 28 of 31 15:53:05 15:53:05 1 none ASM:Graph
 FSG| 93% lines=1993
embedded dns		 trace
49016b6635
NEW		 d33639cb8e [0] Win2K-f 30 of 32 21:10:12 21:10:12 1 none ASM:Graph
 ASPack| 94% lines=34 trace
56ae35572e
[Firefox: 2 hits: 05-01 to 05-02]		 none[4] WinXP 27 of 31 22:24:55 22:24:55 1 none none:none
 none|none none trace
9345b57563
[Firefox:11 hits: 12-27 to 05-07]		 none[4] Win2K-f 9 of 32 14:42:08 14:42:08 1 none none:none
 none|none none trace
a973fc1184
[Firefox: 2 hits: 05-02 to 05-06]		 none[2] Win2K-f 15 of 31 15:13:51 15:13:51 1 none none:none
 none|none none trace
d61a5c46eb
NEW		 none[4] Win2K-f 15 of 32 01:56:09 01:56:09 1 none none:none
 none|none none trace
fd0bf48a75
[Firefox: 7 hits: 04-28 to 05-07]		 none[3] WinXP 20 of 32 04:06:31 04:06:31 1 none none:none
 ASProtect| none trace
8f367186c3
[Firefox:61 hits: 12-27 to 05-05]		 01a06977c4 [0] Win2K-f 14 of 32 08:34:19 08:34:19 1 none ASM:Graph
 TXT2COM| 0% lines=0 trace
10252565c9
[Firefox: 2 hits: 05-02 to 05-06]		 none[4] WinXP 16 of 29 16:29:57 16:29:57 1 none none:none
 none|none none trace