Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

03 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

26e1904aa6
NEW none[4] Win2K-f 7 of 32 06:35:57 06:35:57 1 none none:none
StarForce| none trace

7caa02de8a
NEW none[4] Win2K-f 28 of 31 02:08:47 02:08:47 1 none none:none
Obsidium| none trace

57802172a4
[Firefox: 2 hits: 05-03 to 05-06] 638ec51ab7 [0] WinXP 28 of 31 01:10:50 01:10:50 1 none ASM:Graph
ASProtect| 57% lines=439
embedded dns trace

f515fcc0f7
[Firefox:10 hits: 12-28 to 05-07] dc7696e295 [0] Win2K-f 14 of 32 10:00:31 10:00:31 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

f58222344f
[Firefox: 9 hits: 12-31 to 05-06] 2a56436a64 [0] WinXP 28 of 31 13:13:29 13:13:29 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns trace

bceee848e6
NEW none[4] Win2K-f 21 of 30 08:09:05 08:09:05 1 none none:none
none|none none trace

8a0982bc9b
NEW none[4] WinXP 28 of 32 02:09:30 02:09:30 1 none none:none
none|none none trace

692590bbd0
NEW none[2] WinXP 28 of 32 03:06:12 03:06:12 1 none none:none
none|none none trace

df17a625ee
[Firefox:438 hits: 05-04 to 05-06] none[3] WinXP 29 of 29 06:15:53 08:20:00 2 none none:none
ASPack| none trace

23c32fbd78
NEW none[4] WinXP 16 of 31 11:26:50 11:26:50 1 none none:none
PeCompact| none trace

e47d5fbf7e
NEW none[4] WinXP 20 of 31 08:17:09 08:17:09 1 none none:none
none|none none trace

b9a28a4b68
[Firefox: 2 hits: 04-28 to 05-03] none[4] Win2K-f 28 of 31 06:25:47 06:25:47 1 none none:none
TXT2COM| none trace

a7a78c5fc2
[Firefox: 2 hits: 05-03 to 05-07] none[4] WinXP 22 of 32 07:16:52 07:16:52 1 none none:none
Obsidium| none trace

76b4ab852e
[Firefox:29 hits: 04-29 to 05-07] none[4] Win2K-f
WinXP 12 of 30 01:32:17 04:21:11 3 none none:none
none|none none trace

14ef234ad3
[Firefox: 7 hits: 04-29 to 05-07] none[4] Win2K-f 23 of 31 08:39:57 08:39:57 1 none none:none
none|none none trace

396656c83c
[Firefox: 3 hits: 08-20 to 05-03] none[4] WinXP 21 of 32 16:47:52 16:47:52 1 none none:none
PolyEnE| none trace

af98fe0c94
[Firefox:47 hits: 04-27 to 05-07] 480d076a0a [0] Win2K-f
WinXP 20 of 31 05:11:52 08:26:51 4 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

642095d119
NEW 642095d119 [1] WinXP 20 of 31 01:52:48 01:52:48 1 none ASM:Graph
StarForce| 50% lines=6 trace

8e7611d3db
NEW none[4] Win2K-f 27 of 32 03:30:54 03:30:54 1 none none:none
none|none none trace

27e1055aa3
NEW none[4] WinXP 22 of 32 03:38:48 03:38:48 1 none none:none
none|none none trace

d42c1cc7c0
[Firefox:271 hits: 05-01 to 05-07] af9ca5bed1 [0] WinXP 29 of 29 17:02:18 21:29:31 4 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1008 hits: 05-01 to 05-07] 40f7f463c4 [0] WinXP 29 of 29 01:56:44 01:56:44 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

6f89425f8a
[Firefox:13 hits: 02-08 to 05-03] 6480c2f949 [0] WinXP 30 of 32 17:12:01 17:12:01 1 none ASM:Graph
PolyEnE| 100% lines=73 trace

0330af1285
[Firefox: 5 hits: 05-02 to 05-07] none[4] Win2K-f 19 of 31 05:53:40 07:10:34 2 none none:none
none|none none trace

910d190921
[Firefox: 3 hits: 05-03 to 05-05] none[4] Win2K-f
WinXP 23 of 31 07:17:20 07:32:23 2 none none:none
none|none none trace

90eed12dab
NEW a0fe60597c [0] WinXP 31 of 31 12:40:26 12:40:26 1 none ASM:Graph
none|none 98% lines=84
embedded dns trace

53123fadcc
[Firefox:35 hits: 01-26 to 05-07] none[4] Win2K-f
WinXP 13 of 32 05:14:06 07:04:55 2 none none:none
none|none none trace

7fdfe363d5
[Firefox:2587 hits: 12-31 to 05-07] 10862ea8b8 [0] Win2K-f
WinXP 25 of 28 03:25:43 22:45:56 9 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

639a247ece
[Firefox:24 hits: 04-28 to 05-06] 29d53eec72 [0] WinXP
Win2K-f 10 of 32 03:28:55 08:03:27 3 none ASM:Graph
StarForce| 77% lines=132 trace

24058b237a
[Firefox: 2 hits: 05-03 to 05-05] none[4] Win2K-f 26 of 32 05:25:08 05:25:08 1 none none:none
none|none none trace

7f60162c2c
[Firefox:1274 hits: 12-31 to 05-07] 1aad8e4632 [0] WinXP 25 of 25 08:40:04 17:22:16 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

042774a2b7
[Firefox:135 hits: 05-01 to 05-03] 1c9a472cd7 [0] WinXP 29 of 29 02:51:57 02:51:57 1 none ASM:Graph
PolyEnE| 0% lines=71
embedded dns trace

0d48052a1d
NEW 0bc76628e2 [0] Win2K-f 24 of 32 03:08:28 03:08:28 1 none ASM:Graph
ASPack| 58% lines=409
embedded dns trace

6b9b144f11
[Firefox: 2 hits: 05-03 to 05-03] none[4] WinXP 26 of 31 01:52:48 05:06:54 2 none none:none
none|none none trace

741e3b03b3
[Firefox:25 hits: 09-28 to 05-07] e0197e8a64 [0] WinXP 31 of 32 16:51:26 16:51:26 1 none ASM:Graph
none|none 100% lines=62 trace

3959a8c276
NEW 62a4e6bafe [0] WinXP 30 of 32 14:51:10 14:51:10 1 none ASM:Graph
PolyEnE| 100% lines=129 trace

3ae357d17b
[Firefox:697 hits: 05-01 to 05-07] 462a7be171 [0] WinXP 29 of 29 20:11:57 20:11:57 1 none ASM:Graph
PolyEnE| 99% lines=73 trace

5f78ff609d
[Firefox:825 hits: 04-27 to 05-07] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 00:24:29 15:14:03 63 none ASM:Graph
none|none 46% lines=4 trace

4620861e2d
[Firefox: 7 hits: 04-27 to 05-03] none[4] WinXP
Win2K-f 11 of 31 04:35:18 07:30:55 2 none none:none
StarForce| none trace

c9ce213f1e
[Firefox: 2 hits: 04-30 to 05-03] none[4] Win2K-f 21 of 31 01:21:01 01:21:01 1 none none:none
Obsidium| none trace

7d99b0e910
[Firefox:2956 hits: 12-31 to 05-07] 7a70e1b592 [0] WinXP 26 of 28 01:42:43 23:18:59 5 none ASM:Graph
PolyEnE| 99% lines=68 trace

0e5ee95b7f
NEW none[4] Win2K-f 26 of 31 04:17:17 04:17:17 1 none none:none
Xtreme-Pr| none trace

32a0d7d0e0
[Firefox:38 hits: 05-04 to 05-03] d791762796 [0] WinXP 29 of 29 16:23:05 16:23:05 1 none ASM:Graph
tElock| 100% lines=81
embedded dns trace

a0139d7ad8
[Firefox:430 hits: 05-02 to 05-03] d9e9662db1 [0] WinXP 29 of 29 10:37:30 10:56:31 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

9345b57563
[Firefox:11 hits: 12-27 to 05-07] none[4] WinXP 9 of 32 03:47:27 03:47:27 1 none none:none
none|none none trace

8f367186c3
[Firefox:61 hits: 12-27 to 05-05] 01a06977c4 [0] WinXP
Win2K-f 14 of 32 01:31:29 07:32:39 2 none ASM:Graph
TXT2COM| 0% lines=0 trace

34dbedf630
NEW 603f62f989 [0] WinXP 16 of 32 10:12:00 10:12:00 1 none ASM:Graph
StarForce| 77% lines=132 trace

6169f1f1c5
NEW none[4] Win2K-f 15 of 32 08:53:54 08:53:54 1 none none:none
none|none none trace