Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

04 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

89193031d2
[Firefox: 4 hits: 05-04 to 05-06] none[4] WinXP 28 of 31 12:52:03 12:52:03 1 none none:none
none|none none trace

44bc18e093
NEW none[4] Win2K-f 26 of 31 06:52:15 06:52:15 1 none none:none
none|none none trace

f190da6fbe
[Firefox:27 hits: 12-15 to 05-04] d8dc6af14c [0] WinXP 27 of 32 19:37:42 19:37:42 1 none ASM:Graph
PolyEnE| 100% lines=68 trace

e1e2bddf79
NEW none[4] Win2K-f 28 of 31 08:40:20 08:40:20 1 none none:none
none|none none trace

ea54317f5d
[Firefox: 3 hits: 04-29 to 05-07] none[4] Win2K-f 21 of 31 03:29:45 03:29:45 1 none none:none
none|none none trace

0b8d225034
[Firefox: 2 hits: 05-04 to 05-05] d602884c66 [0] Win2K-f 28 of 31 09:03:12 09:03:12 1 none ASM:Graph
FSG| 93% lines=1993
embedded dns trace

df17a625ee
[Firefox:438 hits: 05-04 to 05-06] none[3] WinXP 29 of 29 16:47:25 16:47:25 1 none none:none
ASPack| none trace

32b7295760
[Firefox: 2 hits: 05-04 to 05-07] 443ee2d2f0 [0] WinXP 28 of 32 09:12:22 09:12:22 1 none ASM:Graph
TXT2COM| 0% lines=11 trace

76b4ab852e
[Firefox:29 hits: 04-29 to 05-07] none[4] Win2K-f 12 of 30 06:45:48 06:45:48 1 none none:none
none|none none trace

93282471f7
[Firefox: 9 hits: 04-28 to 05-07] 95951dee58 [0] Win2K-f 19 of 30 04:39:47 04:39:47 1 none ASM:Graph
ASProtect| 0% lines=0 trace

fc5ab11b1f
NEW none[4] WinXP 28 of 32 03:59:04 03:59:04 1 none none:none
none|none none trace

3f5ec58a6b
[Firefox: 9 hits: 04-24 to 05-05] 4a77430a59 [0] WinXP 30 of 32 02:23:59 02:23:59 1 none ASM:Graph
PolyEnE| 99% lines=70 trace

cf7bb33fb2
[Firefox: 7 hits: 03-11 to 05-04] 3040889c26 [0] WinXP 31 of 32 07:15:17 07:15:17 1 none ASM:Graph
PolyEnE| 100% lines=68 trace

af98fe0c94
[Firefox:47 hits: 04-27 to 05-07] 480d076a0a [0] WinXP 20 of 31 05:54:40 23:51:17 2 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

a12cab51ef
[Firefox:1008 hits: 05-01 to 05-07] 40f7f463c4 [0] WinXP 29 of 29 06:17:19 14:15:36 3 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

9b0c5ed538
[Firefox: 3 hits: 05-02 to 05-04] none[4] WinXP 22 of 31 06:36:52 06:36:52 1 none none:none
none|none none trace

62258fc1b9
[Firefox: 3 hits: 05-04 to 05-06] 673798df40 [0] WinXP 30 of 31 14:03:44 14:03:44 1 none ASM:Graph
PolyEnE| 100% lines=154
embedded dns trace

1ab4d3d7b6
[Firefox: 6 hits: 04-10 to 05-04] cc366b3f6c [0] WinXP 29 of 32 16:06:13 16:06:13 1 none ASM:Graph
none|none 54% lines=287
embedded dns trace

285af12d33
[Firefox: 3 hits: 04-28 to 05-05] none[4] Win2K-f 13 of 32 02:53:08 02:53:08 1 none none:none
none|none none trace

7fdfe363d5
[Firefox:2587 hits: 12-31 to 05-07] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 00:12:45 21:33:36 6 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

7f60162c2c
[Firefox:1274 hits: 12-31 to 05-07] 1aad8e4632 [0] WinXP 25 of 25 14:21:03 20:19:17 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

73be8e511b
NEW none[4] WinXP 27 of 31 06:47:45 06:47:45 1 none none:none
StarForce| none trace

e3f8ba0845
NEW cec20f9127 [0] WinXP 31 of 31 11:06:29 11:06:29 1 none ASM:Graph
PolyEnE| 100% lines=129 trace

741e3b03b3
[Firefox:25 hits: 09-28 to 05-07] e0197e8a64 [0] WinXP 31 of 32 04:10:27 04:10:27 1 none ASM:Graph
none|none 100% lines=62 trace

831f4ee0a7
[Firefox:576 hits: 07-11 to 05-06] eb7546c600 [0] WinXP 29 of 29 15:35:07 15:35:07 1 none ASM:Graph
none|none 100% lines=61 trace

78f157c5ad
NEW none[4] WinXP 28 of 32 04:35:20 04:35:20 1 none none:none
StarForce| none trace

3ae357d17b
[Firefox:697 hits: 05-01 to 05-07] 462a7be171 [0] WinXP 29 of 29 15:08:52 15:08:52 1 none ASM:Graph
PolyEnE| 99% lines=73 trace

5f78ff609d
[Firefox:825 hits: 04-27 to 05-07] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 02:29:17 11:29:32 25 none ASM:Graph
none|none 46% lines=4 trace

39b81ab576
[Firefox: 3 hits: 05-02 to 05-06] 7b8b096e8e [0] Win2K-f 28 of 32 06:13:14 06:13:14 1 none ASM:Graph
EXECrypto| 71% line=1 trace

d370fa2826
[Firefox: 4 hits: 04-24 to 05-04] d4427d3b1e [0] WinXP 31 of 32 09:10:09 09:10:09 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

4538decef7
NEW none[4] Win2K-f 27 of 31 02:26:55 02:26:55 1 none none:none
none|none none trace

7d99b0e910
[Firefox:2956 hits: 12-31 to 05-07] 7a70e1b592 [0] WinXP 26 of 28 09:56:56 17:48:59 5 none ASM:Graph
PolyEnE| 99% lines=68 trace

d4aceeab99
NEW none[4] Win2K-f 28 of 31 03:23:49 03:23:49 1 none none:none
none|none none trace

ab473a4fee
NEW none[3] Win2K-f 28 of 32 06:33:36 06:33:36 1 none none:none
FSG| none trace

1a2c0e6130
[Firefox:372 hits: 12-31 to 05-07] 048df78048 [0] WinXP 29 of 29 08:33:59 08:33:59 1 none ASM:Graph
none|none 100% lines=61 trace

cb89ccfe52
[Firefox: 3 hits: 04-29 to 05-04] 881f6fa4b7 [0] Win2K-f 20 of 31 06:00:26 07:45:41 2 none ASM:Graph
TXT2COM| 59% lines=406
embedded dns trace

6a7149c49f
NEW 8ac4992704 [0] WinXP 30 of 32 11:57:51 11:57:51 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

fd0bf48a75
[Firefox: 7 hits: 04-28 to 05-07] none[3] WinXP 20 of 32 07:09:24 07:09:24 1 none none:none
ASProtect| none trace

8f367186c3
[Firefox:61 hits: 12-27 to 05-05] 01a06977c4 [0] WinXP 14 of 32 08:23:00 08:23:00 1 none ASM:Graph
TXT2COM| 0% lines=0 trace