Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

05 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

89193031d2
[Firefox: 4 hits: 05-04 to 05-06] none[4] WinXP 28 of 31 02:15:23 02:15:23 1 none none:none
none|none none trace

0b8d225034
[Firefox: 2 hits: 05-04 to 05-05] d602884c66 [0] Win2K-f 28 of 31 07:56:11 07:56:11 1 none ASM:Graph
FSG| 93% lines=1993
embedded dns trace

8a133be75e
NEW none[4] Win2K-f 25 of 31 04:18:23 04:18:23 1 none none:none
none|none none trace

f58222344f
[Firefox: 9 hits: 12-31 to 05-06] 2a56436a64 [0] WinXP 28 of 31 02:29:49 02:29:49 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns trace

f6a904d6fd
NEW 843d9d5131 [0] Win2K-f 28 of 31 22:50:43 22:50:43 1 none ASM:Graph
none|none 57% lines=411
embedded dns trace

4b90ef16d1
NEW none[4] WinXP 15 of 31 05:01:48 05:01:48 1 none none:none
none|none none trace

f7f5cc3214
[Firefox: 2 hits: 04-27 to 05-05] 10e5f5c242 [0] WinXP 25 of 31 03:28:02 03:28:02 1 none ASM:Graph
ASProtect| 3% lines=389
embedded dns trace

f55795b9d2
NEW none[4] Win2K-f 28 of 32 05:29:42 05:29:42 1 none none:none
none|none none trace

b2ed8e74f3
NEW 9a1f4a83e4 [0] WinXP 28 of 31 13:16:34 13:16:34 1 none ASM:Graph
FSG| 93% lines=1933
embedded dns trace

492957db81
[Firefox:66 hits: 05-01 to 05-05] 064e4d7742 [0] WinXP 29 of 29 22:58:31 22:58:31 1 none ASM:Graph
PolyEnE| 100% lines=69
embedded dns trace

9ab0223fe6
NEW f01d1c59cf [0] WinXP 29 of 31 18:33:05 18:33:05 1 none ASM:Graph
none|none 97% lines=59 trace

84396f240a
NEW none[4] WinXP 26 of 31 04:50:05 04:50:05 1 none none:none
none|none none trace

bfa308b13a
[Firefox:11 hits: 02-29 to 05-05] 7586a2002b [0] WinXP 30 of 32 07:20:18 07:20:18 1 none ASM:Graph
PolyEnE| 0% lines=0 trace

93282471f7
[Firefox: 9 hits: 04-28 to 05-07] 95951dee58 [0] Win2K-f 19 of 30 05:38:30 14:04:06 2 none ASM:Graph
ASProtect| 0% lines=0 trace

3f5ec58a6b
[Firefox: 9 hits: 04-24 to 05-05] 4a77430a59 [0] WinXP 30 of 32 02:28:01 15:24:28 4 none ASM:Graph
PolyEnE| 99% lines=70 trace

af98fe0c94
[Firefox:47 hits: 04-27 to 05-07] 480d076a0a [0] Win2K-f 20 of 31 01:55:31 18:05:11 8 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

2e557d2c7e
NEW none[4] Win2K-f 27 of 31 07:20:30 07:20:30 1 none none:none
none|none none trace

a12cab51ef
[Firefox:1008 hits: 05-01 to 05-07] 40f7f463c4 [0] WinXP 29 of 29 11:56:04 13:09:35 2 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

e9622e1b8c
NEW b708e83743 [0] WinXP 28 of 31 06:02:18 06:02:18 1 none ASM:Graph
TXT2COM| 59% lines=406
embedded dns trace

910d190921
[Firefox: 3 hits: 05-03 to 05-05] none[4] WinXP 23 of 31 23:54:41 23:54:41 1 none none:none
none|none none trace

195cff1d64
NEW none[4] Win2K-f 28 of 32 18:38:51 18:38:51 1 none none:none
none|none none trace

4e4f880828
NEW f51803bfc5 [0] WinXP 31 of 31 15:13:44 15:13:44 1 none ASM:Graph
FSG| 100% lines=49 trace

00c93dc3f1
[Firefox: 2 hits: 05-01 to 05-05] 8783ead907 [0] WinXP 29 of 31 01:49:31 01:49:31 1 none ASM:Graph
PolyEnE| 100% lines=129 trace

3a65749370
[Firefox: 3 hits: 05-05 to 05-07] c0e04edf74 [0] WinXP 23 of 31 14:20:19 14:20:19 1 none ASM:Graph
TXT2COM| 59% lines=407
embedded dns trace

050e40db58
NEW none[4] WinXP 23 of 31 21:15:46 21:15:46 1 none none:none
ASPack| none trace

b92a35e93d
NEW 2d221cfbcc [0] WinXP 28 of 31 13:39:36 13:39:36 1 none ASM:Graph
FSG| 93% lines=1934
embedded dns trace

7fdfe363d5
[Firefox:2587 hits: 12-31 to 05-07] 10862ea8b8 [0] Win2K-f
WinXP 25 of 28 04:36:17 23:50:58 9 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

639a247ece
[Firefox:24 hits: 04-28 to 05-06] 29d53eec72 [0] Win2K-f 10 of 32 05:25:17 12:11:10 2 none ASM:Graph
StarForce| 77% lines=132 trace

24058b237a
[Firefox: 2 hits: 05-03 to 05-05] none[4] Win2K-f 26 of 32 14:55:07 14:55:07 1 none none:none
none|none none trace

b4ad631671
[Firefox: 5 hits: 04-29 to 05-05] 5890f017cc [0] Win2K-f 18 of 32 23:24:57 23:24:57 1 none ASM:Graph
StarForce| 87% lines=28 trace

8fb9548a47
[Firefox: 2 hits: 04-30 to 05-05] none[4] WinXP 24 of 32 13:48:13 13:48:13 1 none none:none
none|none none trace

0ca18d1183
[Firefox: 2 hits: 04-27 to 05-05] none[4] WinXP 21 of 31 03:12:45 03:12:45 1 none none:none
none|none none trace

d110ead8f3
NEW 37249e39e5 [0] Win2K-f 27 of 31 09:22:56 09:22:56 1 none ASM:Graph
FSG| 93% lines=1935
embedded dns trace

8bf4df7f2c
NEW none[4] Win2K-f 25 of 30 11:52:50 11:52:50 1 none none:none
none|none none trace

5f78ff609d
[Firefox:825 hits: 04-27 to 05-07] d4a06bdc3a [0] WinXP
Win2K-f 21 of 32 01:51:21 23:54:02 92 none ASM:Graph
none|none 46% lines=4 trace

07e23ff778
[Firefox: 2 hits: 05-01 to 05-05]
11db3f85ed
NEW e6c4bf7726 [0]
11db3f85ed[1] WinXP 22 of 31 04:14:20 04:14:20 1 none ASM:Graph
ASM:Graph
StarForce|
StarForce| 50% lines=131
lines=6 trace
trace

36d24c4769
NEW none[4] Win2K-f 28 of 31 02:04:01 02:04:01 1 none none:none
none|none none trace

b38a7b19d3
[Firefox: 2 hits: 05-01 to 05-05] none[4] WinXP 27 of 32 05:42:23 05:42:23 1 none none:none
none|none none trace

07e23ff778
[Firefox: 2 hits: 05-01 to 05-05] e6c4bf7726 [0] WinXP 28 of 32 04:14:20 04:14:20 1 none ASM:Graph
StarForce| 77% lines=131 trace

1a2c0e6130
[Firefox:372 hits: 12-31 to 05-07] 048df78048 [0] WinXP 29 of 29 00:25:28 10:10:02 2 none ASM:Graph
none|none 100% lines=61 trace

a4b5c44a74
NEW none[4] WinXP 23 of 32 23:31:45 23:31:45 1 none none:none
none|none none trace

0eceeeb0e0
[Firefox: 2 hits: 05-05 to 05-07] none[4] WinXP 15 of 31 06:52:49 06:52:49 1 none none:none
none|none none trace

9ecf7bf3a7
NEW 628cb0224e [0] Win2K-f 22 of 31 12:32:41 12:32:41 1 none ASM:Graph
ASProtect| 100% lines=4 trace

a41d9d371e
[Firefox: 3 hits: 04-21 to 05-05] c2640d398b [0] WinXP 30 of 32 12:20:05 12:20:05 1 none ASM:Graph
PolyEnE| 99% lines=129 trace

54b9e74b5f
NEW none[4] WinXP 28 of 32 13:13:41 13:13:41 1 none none:none
none|none none trace

476f161838
[Firefox: 4 hits: 09-08 to 05-05] fae7a2a270 [0] WinXP 29 of 29 21:33:47 21:33:47 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

9345b57563
[Firefox:11 hits: 12-27 to 05-07] none[4] Win2K-f 9 of 32 16:50:02 23:18:12 2 none none:none
none|none none trace

b6d843862c
NEW none[4] Win2K-f 27 of 30 15:03:45 15:03:45 1 none none:none
none|none none trace

a4da27f5aa
[Firefox: 2 hits: 05-05 to 05-06] none[4] Win2K-f 28 of 32 05:06:19 05:06:19 1 none none:none
none|none none trace

9071196480
NEW bae94e6177 [0] WinXP 17 of 31 04:15:02 04:15:02 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

df17a625ee
[Firefox:438 hits: 05-04 to 05-06] none[3] WinXP 29 of 29 03:44:16 03:44:16 1 none none:none
ASPack| none trace

38965f526d
[Firefox: 2 hits: 04-27 to 05-05] none[4] WinXP 27 of 32 11:38:06 11:38:06 1 none none:none
none|none none trace

76b4ab852e
[Firefox:29 hits: 04-29 to 05-07] none[4] Win2K-f
WinXP 12 of 30 05:56:09 10:02:50 7 none none:none
none|none none trace

49181cdddf
NEW none[4] WinXP 17 of 31 08:50:44 08:50:44 1 none none:none
none|none none trace

0ada72d805
[Firefox:29 hits: 05-17 to 05-05] 239ec78f15 [0] WinXP 29 of 29 07:48:52 07:48:52 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

ab48a97a5d
[Firefox: 4 hits: 12-28 to 05-07] 81e9c5d188 [0] WinXP 12 of 31 01:58:03 01:58:03 1 none ASM:Graph
ASProtect| 57% lines=419
embedded dns trace

f9b37a5ae8
[Firefox: 2 hits: 05-02 to 05-05] 77bf267d4e [0] WinXP 18 of 31 08:07:22 08:07:22 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

3a07d0b4fb
NEW none[4] Win2K-f 28 of 32 02:36:43 02:36:43 1 none none:none
none|none none trace

2cf72f62c6
[Firefox: 3 hits: 05-02 to 05-06] none[4] Win2K-f 22 of 31 05:43:46 05:43:46 1 none none:none
none|none none trace

bcbb337622
NEW none[4] WinXP 15 of 32 09:21:58 09:21:58 1 none none:none
none|none none trace

a5ebd4c20f
[Firefox:15 hits: 09-03 to 05-05] aa077ce2e6 [0] Win2K-f 29 of 29 13:30:44 13:30:44 1 none ASM:Graph
PeCompact| 96% lines=2094
embedded dns trace

304bcbf014
NEW none[4] Win2K-f 28 of 31 05:09:29 05:09:29 1 none none:none
none|none none trace

285af12d33
[Firefox: 3 hits: 04-28 to 05-05] none[4] Win2K-f 13 of 32 08:55:25 08:55:25 1 none none:none
none|none none trace

a2a036466a
[Firefox:52 hits: 05-05 to 05-07] none[4] WinXP
Win2K-f 14 of 32 10:37:28 23:30:34 12 none none:none
none|none none trace

53123fadcc
[Firefox:35 hits: 01-26 to 05-07] none[4] WinXP 13 of 32 00:19:31 21:07:12 2 none none:none
none|none none trace

e3ab8df7fb
NEW none[4] WinXP 27 of 31 04:09:49 04:09:49 1 none none:none
none|none none trace

8b10abd5e9
NEW none[4] WinXP 28 of 32 08:26:50 08:26:50 1 none none:none
none|none none trace

7f60162c2c
[Firefox:1274 hits: 12-31 to 05-07] 1aad8e4632 [0] WinXP 25 of 25 19:42:58 19:42:58 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

52fdb89225
NEW 901902cf1e [0] Win2K-f 25 of 31 03:08:14 03:08:14 1 none ASM:Graph
none|none 57% lines=411
embedded dns trace

cf827b3059
NEW 4987c90660 [0] Win2K-f 27 of 31 21:06:27 21:06:27 1 none ASM:Graph
none|none 57% lines=411
embedded dns trace

81a0bf5f43
NEW none[4] Win2K-f 26 of 31 11:12:08 11:12:08 1 none none:none
none|none none trace

3ae357d17b
[Firefox:697 hits: 05-01 to 05-07] 462a7be171 [0] WinXP 29 of 29 02:52:47 02:52:48 2 none ASM:Graph
PolyEnE| 99% lines=73 trace

d204807364
NEW none[4] Win2K-f 27 of 31 12:26:27 12:26:27 1 none none:none
none|none none trace

05f92b3186
NEW none[4] WinXP 27 of 31 21:40:05 21:40:05 1 none none:none
none|none none trace

7d99b0e910
[Firefox:2956 hits: 12-31 to 05-07] 7a70e1b592 [0] WinXP 26 of 28 09:12:14 16:55:46 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

6bd16b7a95
[Firefox: 2 hits: 05-05 to 05-06] none[4] Win2K-f 21 of 30 18:50:21 18:50:21 1 none none:none
none|none none trace

9b2502c4c5
NEW none[4] Win2K-f 25 of 30 17:57:00 17:57:00 1 none none:none
none|none none trace

c1f12e0109
[Firefox:10 hits: 04-28 to 05-07] none[4] Win2K-f
WinXP 21 of 31 03:41:13 23:52:56 2 none none:none
none|none none trace

43306fc684
[Firefox: 6 hits: 12-28 to 05-05] 59fc5b2b93 [0] WinXP 30 of 32 11:12:59 11:12:59 1 none ASM:Graph
PolyEnE| 33% lines=60 trace

1763adf0a8
[Firefox: 4 hits: 07-16 to 05-05] none[4] WinXP 19 of 29 16:56:39 16:56:39 1 none none:none
PolyEnE| none trace

bfab284e67
[Firefox: 3 hits: 05-01 to 05-05] 13a0c147f5 [0] Win2K-f 20 of 31 04:46:38 04:46:38 1 none ASM:Graph
ASProtect| 57% lines=420
embedded dns trace

6367f5788d
NEW none[4] WinXP 15 of 31 05:22:35 05:22:35 1 none none:none
none|none none trace

8f367186c3
[Firefox:61 hits: 12-27 to 05-05] 01a06977c4 [0] Win2K-f 14 of 32 04:00:17 05:54:44 2 none ASM:Graph
TXT2COM| 0% lines=0 trace