Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


07 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1128e6e384
NEW		 none[4] Win2K-f 26 of 31 11:42:12 11:42:12 1 none none:none
 none|none none trace
a107502d71
NEW		 none[4] Win2K-f 27 of 30 01:22:10 01:22:10 1 none none:none
 none|none none trace
0c30c02f9e
NEW
41eeb01083
NEW		 none[4]
none [4]		 Win2K-f 20 of 31 01:06:02 01:06:02 1 none none:none
none:none
 Armadillo|
EXECrypto|		 none
none		 trace
trace
f515fcc0f7
[Firefox: 9 hits: 12-28 to 05-03]		 dc7696e295 [0] WinXP 14 of 32 12:18:36 12:18:36 1 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
ea54317f5d
[Firefox: 2 hits: 04-29 to 05-04]		 none[4] Win2K-f 21 of 31 10:46:47 10:46:47 1 none none:none
 none|none none trace
1fcc146d70
[Firefox:232 hits: 05-02 to 04-21]		 258fafe892 [0] WinXP 29 of 29 21:35:16 21:35:16 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
64b36642a6
[Firefox: 2 hits: 04-28 to 04-28]		 none[4] Win2K-f 26 of 32 03:31:57 03:31:57 1 none none:none
 none|none none trace
beb8369329
[Firefox: 4 hits: 04-23 to 05-06]		 665f1def5b [0] Win2K-f
WinXP		 12 of 32 02:36:57 15:37:56 4 none ASM:Graph
 ASPack| 0% lines=0 trace
0197c6c127
[Firefox: 2 hits: 04-27 to 04-30]		 none[4] Win2K-f 28 of 32 02:14:56 02:14:56 1 none none:none
 none|none none trace
b0b75cccb8
NEW		 none[4] Win2K-f 27 of 31 16:14:12 16:14:12 1 none none:none
 none|none none trace
4809bc66cb
NEW		 none[4] Win2K-f 22 of 31 11:18:47 23:06:28 2 none none:none
 ASProtect| none trace
b8a248f67d
NEW		 none[4] Win2K-f 28 of 31 11:00:18 11:00:18 1 none none:none
 FSG| none trace
0c30c02f9e
NEW
41eeb01083
NEW
4c0f2bc7d5
NEW		 none[4]
none [4]
none [4]		 Win2K-f 19 of 31 01:06:02 01:06:02 1 none none:none
none:none
none:none
 Armadillo|
EXECrypto|
EXECrypto|		 none
none
none		 trace
trace
trace
a5e1fa3343
NEW		 none[4] WinXP 22 of 31 16:38:06 16:38:06 1 none none:none
 none|none none trace
93282471f7
[Firefox: 7 hits: 04-28 to 05-05]		 95951dee58 [0] WinXP
Win2K-f		 19 of 30 00:23:08 21:24:11 2 none ASM:Graph
 ASProtect| 0% lines=0 trace
a526bd2c66
NEW		 none[4] WinXP 25 of 31 12:55:00 12:55:00 1 none none:none
 ASPack| none trace
af98fe0c94
[Firefox:40 hits: 04-27 to 05-06]		 480d076a0a [0] Win2K-f
WinXP		 20 of 31 00:35:14 11:06:19 7 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
1630b54a28
NEW		 none[4] Win2K-f 26 of 31 19:46:05 19:46:05 1 none none:none
 none|none none trace
8f808e3467
NEW		 none[4] WinXP 12 of 31 15:44:53 15:44:53 1 none none:none
 none|none none trace
d42c1cc7c0
[Firefox:270 hits: 05-01 to 05-06]		 af9ca5bed1 [0] WinXP 29 of 29 12:08:34 12:08:34 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1007 hits: 05-01 to 05-05]		 40f7f463c4 [0] WinXP 29 of 29 18:48:28 18:48:28 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
1c118bd944
NEW		 none[4] Win2K-f 26 of 31 06:05:54 06:05:54 1 none none:none
 Obsidium| none trace
0330af1285
[Firefox: 3 hits: 05-02 to 05-03]		 none[4] WinXP
Win2K-f		 19 of 31 00:19:52 23:56:59 2 none none:none
 none|none none trace
3a65749370
[Firefox: 2 hits: 05-05 to 05-06]		 c0e04edf74 [0] Win2K-f 23 of 31 13:46:14 13:46:14 1 none ASM:Graph
 TXT2COM| 59% lines=407
embedded dns		 trace
7fdfe363d5
[Firefox:2580 hits: 12-31 to 05-06]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 08:43:37 23:08:06 7 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
f54a76fb5b
[Firefox: 2 hits: 04-28 to 04-29]		 none[4] Win2K-f 17 of 32 03:19:17 03:19:17 1 none none:none
 none|none none trace
6a08d9e276
NEW		 none[4] Win2K-f 12 of 31 05:09:38 05:09:38 1 none none:none
 none|none none trace
741e3b03b3
[Firefox:24 hits: 09-28 to 05-06]		 e0197e8a64 [0] WinXP 31 of 32 21:20:11 21:20:11 1 none ASM:Graph
 none|none 100% lines=62 trace
69c2c8ef9b
NEW		 none[4] Win2K-f 22 of 31 01:19:04 01:19:04 1 none none:none
 ASProtect| none trace
aeaa10cc8d
NEW		 none[4] WinXP 15 of 30 16:20:25 16:20:25 1 none none:none
 none|none none trace
393d3a40db
[Firefox: 2 hits: 12-14 to 02-14]		 8a0ff8065a [0] WinXP 31 of 32 16:41:23 16:41:23 1 none ASM:Graph
 PolyEnE| 0% lines=76 trace
3860c49118
NEW		 none[4] Win2K-f 26 of 31 13:20:02 13:20:02 1 none none:none
 none|none none trace
5f78ff609d
[Firefox:747 hits: 04-27 to 05-06]		 d4a06bdc3a [4] Win2K-f
WinXP		 21 of 32 00:06:37 23:48:25 78 none ASM:Graph
 none|none 46% lines=4 trace
4ab5b0788c
[Firefox: 2 hits: 04-21 to 04-21]		 272da55ef8 [0] WinXP 29 of 31 07:59:09 07:59:09 1 none ASM:Graph
 PolyEnE| 100% lines=114 trace
ded3cb4260
NEW		 ded3cb4260 [1] Win2K-f 29 of 31 16:24:27 16:24:27 1 none ASM:Graph
 FSG| lines=21 trace
e37555c26e
NEW		 none[4] Win2K-f 27 of 31 05:26:06 05:26:06 1 none none:none
 Xtreme-Pr| none trace
dc8e1c63cd
[Firefox:76 hits: 12-27 to 05-06]		 e0eb8646ee [0] Win2K-f 22 of 32 12:56:27 12:56:27 1 none ASM:Graph
 none|none 62% lines=601
embedded dns		 trace
5462cc1bde
[Firefox: 4 hits: 04-21 to 05-06]		 665f1def5b [0] WinXP 10 of 32 03:41:37 03:41:37 1 none ASM:Graph
 ASPack| 0% lines=0 trace
4531998492
NEW		 none[4] WinXP 28 of 31 02:54:38 02:54:38 1 none none:none
 FSG| none trace
1a2c0e6130
[Firefox:371 hits: 12-31 to 05-05]		 048df78048 [0] WinXP 29 of 29 18:37:43 18:37:43 1 none ASM:Graph
 none|none 100% lines=61 trace
d3beeafba3
NEW		 none[4] WinXP 28 of 32 15:34:28 15:34:28 1 none none:none
 none|none none trace
8be304341b
[Firefox: 3 hits: 05-06 to 05-06]		 51c0a74ab9 [0] Win2K-f 23 of 32 15:45:42 15:45:42 1 none ASM:Graph
 ASPack| 47% lines=4773
embedded dns		 trace
0eceeeb0e0
NEW		 none[4] WinXP 15 of 31 18:19:19 18:19:19 1 none none:none
 none|none none trace
4f887ca272
[Firefox:32 hits: 01-26 to 04-29]		 4f887ca272 [1] WinXP 0 of 0 08:48:43 08:48:43 1 none ASM:Graph
 Stranik| 36% lines=6 trace
278459b105
NEW		 none[4] WinXP 18 of 31 08:29:29 08:29:29 1 none none:none
 none|none none trace
01c4229e55
NEW		 none[4] Win2K-f 13 of 31 12:45:27 12:45:27 1 none none:none
 none|none none trace
9345b57563
[Firefox:10 hits: 12-27 to 05-06]		 none[4] Win2K-f 9 of 32 12:21:53 12:21:53 1 none none:none
 none|none none trace
bfa453a453
NEW		 none[4] WinXP 22 of 31 05:07:19 05:07:19 1 none none:none
 none|none none trace
1e5df7ba74
[Firefox: 9 hits: 03-24 to 04-30]		 a5331b711f [0] WinXP 31 of 32 01:21:37 01:21:37 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
745a1218e8
NEW		 none[4] Win2K-f 15 of 31 16:19:02 16:19:02 1 none none:none
 none|none none trace
0c30c02f9e
NEW
41eeb01083
NEW
4c0f2bc7d5
NEW
d782d4b691
NEW		 none[4]
none [4]
none [4]
d782d4b691[1]		 Win2K-f 12 of 31 01:06:02 01:06:02 1 none none:none
none:none
none:none
ASM:Graph
 Armadillo|
EXECrypto|
EXECrypto|
none|none		 0% none
none
none
lines=0		 trace
trace
trace
trace
b22992699c
NEW		 none[4] WinXP 19 of 31 22:27:52 22:27:52 1 none none:none
 ASProtect| none trace
4abf78797f
NEW		 none[4] WinXP 27 of 31 09:02:40 09:02:40 1 none none:none
 Stranik| none trace
94a9d2653b
NEW		 none[4] WinXP 30 of 32 04:03:04 04:03:04 1 none none:none
 none|none none trace
32b7295760
NEW		 443ee2d2f0 [0] WinXP 28 of 32 14:42:14 14:42:14 1 none ASM:Graph
 TXT2COM| 0% lines=11 trace
fc61810077
NEW		 none[4] Win2K-f 22 of 31 20:00:13 20:00:13 1 none none:none
 none|none none trace
32e0c23c3e
NEW		 none[4] WinXP 28 of 32 08:14:07 08:14:07 1 none none:none
 none|none none trace
76b4ab852e
[Firefox:27 hits: 04-29 to 05-06]		 none[4] Win2K-f
WinXP		 12 of 30 04:09:04 23:37:31 2 none none:none
 none|none none trace
a7a78c5fc2
NEW		 none[4] WinXP 22 of 32 11:20:55 11:20:55 1 none none:none
 Obsidium| none trace
14ef234ad3
[Firefox: 5 hits: 04-29 to 05-06]		 none[4] Win2K-f 23 of 31 13:08:46 15:43:59 2 none none:none
 none|none none trace
ab48a97a5d
[Firefox: 3 hits: 12-28 to 05-05]		 81e9c5d188 [0] WinXP 12 of 31 04:40:30 04:40:30 1 none ASM:Graph
 ASProtect| 57% lines=419
embedded dns		 trace
cd05c2e205
NEW		 none[4] WinXP 26 of 31 01:33:12 01:33:12 1 none none:none
 none|none none trace
a2a036466a
[Firefox:30 hits: 05-05 to 05-06]		 none[4] Win2K-f
WinXP		 14 of 32 00:08:18 23:28:59 22 none none:none
 none|none none trace
53123fadcc
[Firefox:34 hits: 01-26 to 05-06]		 none[4] WinXP 13 of 32 05:12:54 05:12:54 1 none none:none
 none|none none trace
7d356e0447
NEW		 none[4] WinXP 28 of 31 09:56:03 09:56:03 1 none none:none
 TXT2COM| none trace
7f60162c2c
[Firefox:1270 hits: 12-31 to 05-06]		 1aad8e4632 [0] WinXP 25 of 25 03:01:05 16:31:34 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
272d6188bd
NEW		 none[4] WinXP 26 of 31 06:59:39 06:59:39 1 none none:none
 none|none none trace
5b64aefe5d
NEW		 none[4] Win2K-f 13 of 32 01:37:33 01:37:33 1 none none:none
 none|none none trace
468140ed8f
NEW		 none[4] WinXP 19 of 32 13:52:31 13:52:31 1 none none:none
 none|none none trace
08a51bcc57
NEW		 none[4] WinXP 21 of 31 12:03:37 12:03:37 1 none none:none
 none|none none trace
362b6c6470
NEW		 none[4] Win2K-f 21 of 31 00:59:46 00:59:46 1 none none:none
 none|none none trace
0c30c02f9e
NEW		 none[4] Win2K-f 26 of 31 01:06:02 01:06:02 1 none none:none
 Armadillo| none trace
52817d68b3
NEW		 none[4] Win2K-f 22 of 31 08:17:55 08:17:55 1 none none:none
 none|none none trace
3ae357d17b
[Firefox:696 hits: 05-01 to 05-06]		 462a7be171 [0] WinXP 29 of 29 13:14:07 13:14:07 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
7d99b0e910
[Firefox:2955 hits: 12-31 to 05-06]		 7a70e1b592 [0] WinXP 26 of 28 23:21:44 23:21:44 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ee814e301c
NEW		 none[4] WinXP 31 of 32 08:41:14 08:41:14 1 none none:none
 PolyEnE| none trace
9373130c42
[Firefox:29 hits: 01-24 to 03-28]		 0945dbe41c [0] WinXP 31 of 32 18:46:35 18:49:11 2 none ASM:Graph
 PolyEnE| 100% lines=68 trace
c1f12e0109
[Firefox: 9 hits: 04-28 to 05-06]		 none[4] Win2K-f 21 of 31 02:16:55 02:16:55 1 none none:none
 none|none none trace
ab5e47bf8d
[Firefox:44 hits: 05-10 to 05-01]		 none[3] WinXP 29 of 29 18:49:16 18:49:16 1 none none:none
 ASPack| none trace
d4a5b92dbe
NEW		 none[4] WinXP 28 of 31 03:16:05 03:16:05 1 none none:none
 ASProtect| none trace
df56f8db22
NEW		 none[4] WinXP 29 of 31 23:57:58 23:57:58 1 none none:none
 PolyEnE| none trace
a92e3f8fc8
[Firefox:108 hits: 05-03 to 04-26]		 dfe02a1e52 [0] WinXP 26 of 28 01:25:05 01:25:11 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
2a765da2e8
NEW		 none[4] Win2K-f 28 of 31 06:21:12 06:21:12 1 none none:none
 none|none none trace
fd0bf48a75
[Firefox: 6 hits: 04-28 to 05-06]		 none[3] Win2K-f 20 of 32 21:48:34 21:48:34 1 none none:none
 ASProtect| none trace
d181940279
NEW		 none[4] Win2K-f 26 of 31 05:34:14 05:34:14 1 none none:none
 none|none none trace