Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

10 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

b62ebddc0c
NEW none[3] Win2K-f 29 of 32 03:34:45 03:34:45 1 none none:none
none|none none trace

0f033f7f3a
NEW none[none] WinXP 18 of 29 16:27:21 16:27:21 1 none none:none
none|none none none

b776b8ff4a
NEW none[none] Win2K-f 22 of 31 10:55:18 10:55:18 1 none none:none
none|none none none

f190da6fbe
[Firefox:27 hits: 12-15 to 05-04] d8dc6af14c [0] WinXP 27 of 32 17:21:53 17:21:53 1 none ASM:Graph
PolyEnE| 100% lines=68 trace

f515fcc0f7
[Firefox:10 hits: 12-28 to 05-07] dc7696e295 [0] Win2K-f 14 of 32 21:33:23 21:33:23 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

ae353cfcaf
[Firefox: 2 hits: 03-29 to 04-10] 795996ac06 [0] WinXP 31 of 32 14:17:11 14:17:11 1 none ASM:Graph
PolyEnE| 99% lines=78
embedded dns trace

0b8d225034
[Firefox: 2 hits: 05-04 to 05-05] d602884c66 [0] WinXP 28 of 31 09:55:13 09:55:13 1 none ASM:Graph
FSG| 93% lines=1993
embedded dns trace

8f64c3f9be
NEW none[none] WinXP 27 of 32 17:34:23 17:34:23 1 none none:none
none|none none none

275aa14617
NEW none[none] WinXP 26 of 32 08:36:08 08:36:08 1 none none:none
none|none none none

df17a625ee
[Firefox:438 hits: 05-04 to 05-06] none[3] WinXP 29 of 29 00:08:37 00:08:37 1 none none:none
ASPack| none trace

93282471f7
[Firefox:14 hits: 04-28 to 05-09] 95951dee58 [0] WinXP 19 of 30 14:11:25 14:11:25 1 none ASM:Graph
ASProtect| 0% lines=0 trace

15bee5b293
NEW none[none] WinXP 27 of 32 02:58:25 02:58:25 1 none none:none
none|none none none

76b4ab852e
[Firefox:34 hits: 04-29 to 05-09] none[4] WinXP
Win2K-f 12 of 30 00:54:59 17:26:57 2 none none:none
none|none none trace

7d2158208c
NEW none[none] WinXP 18 of 31 23:45:53 23:45:53 1 none none:none
none|none none none

3f5ec58a6b
[Firefox:12 hits: 04-24 to 05-08] 4a77430a59 [0] WinXP 30 of 32 20:34:57 20:34:57 1 none ASM:Graph
PolyEnE| 99% lines=70 trace

af98fe0c94
[Firefox:51 hits: 04-27 to 05-09] 480d076a0a [0] WinXP
Win2K-f 20 of 31 07:37:48 08:21:51 2 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

e9e84f9249
NEW none[none] WinXP 26 of 32 09:36:18 09:36:18 1 none none:none
none|none none none

5b867354d5
NEW none[none] WinXP 21 of 31 08:25:15 08:25:15 1 none none:none
none|none none none

d42c1cc7c0
[Firefox:272 hits: 05-01 to 05-08] af9ca5bed1 [0] WinXP 29 of 29 12:54:41 12:54:41 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1011 hits: 05-01 to 05-09] 40f7f463c4 [0] WinXP 29 of 29 07:55:26 07:55:26 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

9b0c5ed538
[Firefox: 3 hits: 05-02 to 05-04] none[4] WinXP 22 of 31 21:53:27 21:53:27 1 none none:none
none|none none trace

6b9249333c
NEW none[none] WinXP 14 of 31 09:24:04 09:24:04 1 none none:none
none|none none none

e3ed9b37bb
NEW none[none] Win2K-f 26 of 31 21:09:52 21:09:52 1 none none:none
none|none none none

0330af1285
[Firefox: 6 hits: 05-02 to 05-08] none[4] Win2K-f 19 of 31 07:54:16 07:54:16 1 none none:none
none|none none trace

fe33876bb5
NEW 0d26a6ec08 [0] WinXP 30 of 32 08:46:24 08:46:47 2 none ASM:Graph
PolyEnE| 98% lines=71 trace

a2a036466a
[Firefox:86 hits: 05-05 to 05-09] none[4] Win2K-f
WinXP 14 of 32 00:24:50 23:50:29 30 none none:none
none|none none trace

53123fadcc
[Firefox:36 hits: 01-26 to 05-08] none[4] Win2K-f 13 of 32 03:59:54 08:59:38 2 none none:none
none|none none trace

7fdfe363d5
[Firefox:2597 hits: 12-31 to 05-09] 10862ea8b8 [0] Win2K-f
WinXP 25 of 28 04:08:19 21:32:31 4 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

7f60162c2c
[Firefox:1276 hits: 12-31 to 05-09] 1aad8e4632 [0] WinXP 25 of 25 08:53:10 16:27:45 2 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

b4ad631671
[Firefox: 5 hits: 04-29 to 05-05] 5890f017cc [0] WinXP 18 of 32 00:09:29 00:09:29 1 none ASM:Graph
StarForce| 87% lines=28 trace

e1776b271c
NEW none[none] WinXP 30 of 32 01:58:00 01:58:00 1 none none:none
none|none none none

393d3a40db
[Firefox: 3 hits: 12-14 to 05-07] 8a0ff8065a [0] WinXP 31 of 32 14:08:33 14:08:33 1 none ASM:Graph
PolyEnE| 0% lines=76 trace

7d3477019d
NEW none[none] Win2K-f 26 of 31 13:04:40 13:04:40 1 none none:none
none|none none none

831f4ee0a7
[Firefox:582 hits: 07-11 to 05-09] eb7546c600 [0] WinXP 29 of 29 01:39:56 01:39:56 1 none ASM:Graph
none|none 100% lines=61 trace

3ae357d17b
[Firefox:698 hits: 05-01 to 05-08] 462a7be171 [0] WinXP 29 of 29 14:35:58 18:56:53 4 none ASM:Graph
PolyEnE| 99% lines=73 trace

5f78ff609d
[Firefox:964 hits: 04-27 to 05-09] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 02:21:49 23:57:25 61 none ASM:Graph
none|none 46% lines=4 trace

4620861e2d
[Firefox:11 hits: 04-27 to 05-09] none[4] WinXP 11 of 31 08:23:58 17:06:36 2 none none:none
StarForce| none trace

0963ba6524
NEW none[none] WinXP 29 of 31 11:03:13 11:03:13 1 none none:none
none|none none none

943ba332f2
NEW none[none] Win2K-f 28 of 31 04:59:07 04:59:07 1 none none:none
none|none none none

7d99b0e910
[Firefox:2960 hits: 12-31 to 05-08] 7a70e1b592 [0] WinXP 26 of 28 05:40:44 22:20:01 4 none ASM:Graph
PolyEnE| 99% lines=68 trace

e1b5e07fac
NEW none[none] Win2K-f 27 of 31 09:47:46 09:47:46 1 none none:none
none|none none none

7e28dac8de
[Firefox:12 hits: 04-27 to 05-09] none[4] WinXP 18 of 32 21:21:23 21:21:23 1 none none:none
none|none none trace

d511f0fe16
NEW none[none] WinXP 54 of 62 11:33:41 11:33:41 1 none none:none
none|none none none

dc8e1c63cd
[Firefox:80 hits: 12-27 to 05-09] e0eb8646ee [0] Win2K-f 22 of 32 08:50:26 09:02:14 2 none ASM:Graph
none|none 62% lines=601
embedded dns trace

b124ac86a8
NEW 3e3ef3ba0d [0] Win2K-f 20 of 30 18:41:47 18:41:47 1 none ASM:Graph
TXT2COM| 59% lines=407
embedded dns trace

36a1bf4777
[Firefox: 2 hits: 05-08 to 05-09] none[4] WinXP 29 of 31 21:36:50 21:36:50 1 none none:none
PolyEnE| none trace

890fb4fa10
[Firefox:42 hits: 12-27 to 05-06] b9c7f08a57 [0] Win2K-f 19 of 32 20:45:20 20:45:20 1 none ASM:Graph
ASProtect| 3% lines=393
embedded dns trace

c1f12e0109
[Firefox:11 hits: 04-28 to 05-09] none[4] Win2K-f 21 of 31 08:03:39 08:03:39 1 none none:none
none|none none trace

1a2c0e6130
[Firefox:376 hits: 12-31 to 05-09] 048df78048 [0] WinXP 29 of 29 18:19:05 18:19:05 1 none ASM:Graph
none|none 100% lines=61 trace

cb89ccfe52
[Firefox: 6 hits: 04-29 to 05-09] 881f6fa4b7 [0] Win2K-f 20 of 31 02:27:36 09:37:49 2 none ASM:Graph
TXT2COM| 59% lines=406
embedded dns trace

4f887ca272
[Firefox:34 hits: 01-26 to 05-08] 4f887ca272 [1] WinXP 0 of 0 11:44:40 11:44:40 1 none ASM:Graph
Stranik| 36% lines=6 trace

f30bfd6717
NEW none[none] WinXP 27 of 31 21:57:08 21:57:08 1 none none:none
none|none none none

9ecf7bf3a7
NEW 628cb0224e [0] Win2K-f 22 of 31 06:30:34 06:30:34 1 none ASM:Graph
ASProtect| 100% lines=4 trace

a92e3f8fc8
[Firefox:110 hits: 05-03 to 05-07] dfe02a1e52 [0] WinXP 26 of 28 16:51:03 16:51:03 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

56ae35572e
[Firefox: 2 hits: 05-01 to 05-02] none[4] WinXP 27 of 31 07:42:02 07:42:02 1 none none:none
none|none none trace

f4f4e9d34f
NEW none[none] Win2K-f 15 of 31 20:07:06 20:07:06 1 none none:none
none|none none none

a0139d7ad8
[Firefox:430 hits: 05-02 to 05-03] d9e9662db1 [0] WinXP 29 of 29 12:22:15 12:22:15 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

9345b57563
[Firefox:11 hits: 12-27 to 05-07] none[4] WinXP 9 of 32 04:59:10 04:59:10 1 none none:none
none|none none trace

e21ca9f78a
NEW none[none] WinXP 22 of 31 07:42:54 07:42:54 1 none none:none
none|none none none

8f367186c3
[Firefox:65 hits: 12-27 to 05-09] 01a06977c4 [0] Win2K-f
WinXP 14 of 32 05:21:53 11:37:42 3 none ASM:Graph
TXT2COM| 0% lines=0 trace

10252565c9
[Firefox: 2 hits: 05-02 to 05-06] none[4] Win2K-f 16 of 29 13:59:48 13:59:48 1 none none:none
none|none none trace