Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

12 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

c98241e6b1
NEW c98241e6b1 [1] Win2K-f 4 of 32 23:02:51 23:02:51 1 none ASM:Graph
StarForce| 44% lines=91 trace

1e5df7ba74
[Firefox:10 hits: 03-24 to 05-07] a5331b711f [0] WinXP 31 of 32 04:36:18 15:06:56 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

fc9addab43
[Firefox: 2 hits: 05-08 to 05-09] none[4] Win2K-f 21 of 31 03:16:54 09:46:05 2 none none:none
none|none none trace

d0dffaf5fd
NEW none[4] WinXP 14 of 32 22:16:57 22:16:57 1 none none:none
none|none none trace

f515fcc0f7
[Firefox:11 hits: 12-28 to 05-10] dc7696e295 [0] Win2K-f
WinXP 14 of 32 12:59:24 13:05:06 2 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

222ca6fbc7
NEW none[4] Win2K-f 21 of 32 22:24:57 22:24:57 1 none none:none
ASProtect| none trace

1fcc146d70
[Firefox:233 hits: 05-02 to 05-07] 258fafe892 [0] WinXP 29 of 29 15:08:27 15:08:27 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

1c2898aa4c
NEW none[3] Win2K-f 7 of 32 02:53:06 02:53:06 1 none none:none
MEW| none trace

59754a184b
NEW none[4] WinXP 27 of 32 12:41:16 16:28:38 2 none none:none
none|none none trace

df17a625ee
[Firefox:440 hits: 05-04 to 05-11] none[3] WinXP 29 of 29 07:30:47 17:15:07 3 none none:none
ASPack| none trace

38965f526d
[Firefox: 2 hits: 04-27 to 05-05] none[4] Win2K-f 27 of 32 23:36:58 23:36:58 1 none none:none
none|none none trace

e47d5fbf7e
[Firefox: 2 hits: 05-03 to 05-09] none[4] Win2K-f 20 of 31 12:53:23 12:53:23 1 none none:none
none|none none trace

c05385e600
[Firefox:17 hits: 06-24 to 03-23] 6a383b021d [0] WinXP 29 of 29 00:08:31 00:08:31 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

93282471f7
[Firefox:15 hits: 04-28 to 05-10] 95951dee58 [0] WinXP 19 of 30 09:42:03 09:42:03 1 none ASM:Graph
ASProtect| 0% lines=0 trace

76b4ab852e
[Firefox:38 hits: 04-29 to 05-11] none[4] Win2K-f 12 of 30 05:34:39 12:15:39 2 none none:none
none|none none trace

e028f5958b
NEW none[4] Win2K-f 28 of 32 12:58:30 12:58:30 1 none none:none
none|none none trace

3f5ec58a6b
[Firefox:14 hits: 04-24 to 05-11] 4a77430a59 [0] WinXP 30 of 32 04:52:41 15:47:01 2 none ASM:Graph
PolyEnE| 99% lines=70 trace

af98fe0c94
[Firefox:54 hits: 04-27 to 05-11] 480d076a0a [0] Win2K-f
WinXP 20 of 31 01:28:11 09:41:12 3 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

9e49183472
[Firefox: 2 hits: 04-18 to 04-24] ccbd896513 [0] WinXP 29 of 32 03:21:48 03:21:48 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns trace

d88ce21f56
NEW none[4] Win2K-f 29 of 32 18:06:00 18:06:00 1 none none:none
none|none none trace

68bd8edcff
NEW none[4] Win2K-f 22 of 31 11:47:25 11:47:25 1 none none:none
none|none none trace

e3ed9b37bb
NEW none[4] WinXP 26 of 31 09:48:51 09:48:51 1 none none:none
none|none none trace

372a1e58f3
NEW none[4] Win2K-f 18 of 32 12:39:33 12:39:33 1 none none:none
none|none none trace

0e05ea6b73
NEW none[4] WinXP 30 of 33 14:46:58 14:46:58 1 none none:none
none|none none trace

a2a036466a
[Firefox:126 hits: 05-05 to 05-11] none[4] Win2K-f
WinXP 14 of 32 00:22:18 23:10:22 24 none none:none
none|none none trace

53123fadcc
[Firefox:39 hits: 01-26 to 05-11] none[4] WinXP
Win2K-f 13 of 32 05:17:50 22:43:21 4 none none:none
none|none none trace

639a247ece
[Firefox:28 hits: 04-28 to 05-11] 29d53eec72 [0] Win2K-f 10 of 32 15:43:48 15:43:48 1 none ASM:Graph
StarForce| 77% lines=132 trace

1c2898aa4c
NEW
5bc584801d
NEW
7d356e0447
NEW none[3]
5bc584801d[1]
none [4] Win2K-f 28 of 31 02:53:06 02:53:06 1 none none:none
ASM:Graph
none:none
MEW|
FSG|
TXT2COM| none
lines=6
none trace
trace
trace

c0e4027c8e
NEW none[4] Win2K-f 29 of 33 05:05:35 05:05:35 1 none none:none
ASProtect| none trace

7f60162c2c
[Firefox:1279 hits: 12-31 to 05-11] 1aad8e4632 [0] WinXP 25 of 25 10:37:41 14:18:14 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

bb708c27c5
NEW none[4] WinXP 22 of 32 06:45:19 06:45:19 1 none none:none
none|none none trace

9543d041a7
[Firefox: 5 hits: 05-16 to 02-18] 49e3eed5c5 [0] WinXP 29 of 29 14:40:50 14:41:16 2 none ASM:Graph
PolyEnE| 100% lines=77
embedded dns trace

385673ebab
NEW none[4] Win2K-f 16 of 33 10:43:34 10:43:34 1 none none:none
none|none none trace

46dbeecaf1
NEW none[4] Win2K-f 23 of 28 13:13:44 13:13:44 1 none none:none
none|none none trace

831f4ee0a7
[Firefox:583 hits: 07-11 to 05-10] eb7546c600 [0] WinXP 29 of 29 06:19:49 19:02:49 2 none ASM:Graph
none|none 100% lines=61 trace

362b6c6470
[Firefox: 2 hits: 05-07 to 05-09] none[4] WinXP 21 of 31 20:05:26 20:05:26 1 none none:none
none|none none trace

5f78ff609d
[Firefox:1057 hits: 04-27 to 05-11] d4a06bdc3a [0] WinXP
Win2K-f 21 of 32 00:07:56 23:23:53 56 none ASM:Graph
none|none 46% lines=4 trace

71c3f3b2da
NEW none[4] WinXP 31 of 32 09:25:04 09:25:04 1 none none:none
PolyEnE| none trace

9928a1e660
[Firefox:16 hits: 10-06 to 02-13] 28c8dadabf [0] Win2K-f 31 of 32 08:40:11 08:40:11 1 none ASM:Graph
none|none 99% lines=104
embedded dns trace

136465f503
NEW 100a38af2e [0] WinXP 28 of 31 11:57:46 11:57:46 1 none ASM:Graph
none|none 57% lines=411
embedded dns trace

7d99b0e910
[Firefox:2964 hits: 12-31 to 05-10] 7a70e1b592 [0] WinXP 26 of 28 08:07:59 15:38:28 3 none ASM:Graph
PolyEnE| 99% lines=68 trace

8a6a3845b5
NEW none[4] Win2K-f 25 of 32 10:09:08 10:09:08 1 none none:none
none|none none trace

dc8e1c63cd
[Firefox:82 hits: 12-27 to 05-10] e0eb8646ee [0] WinXP
Win2K-f 22 of 32 03:41:28 15:23:02 2 none ASM:Graph
none|none 62% lines=601
embedded dns trace

1c2898aa4c
NEW
5bc584801d
NEW none[3]
5bc584801d[1] Win2K-f 17 of 32 02:53:06 02:53:06 1 none none:none
ASM:Graph
MEW|
FSG| 50% none
lines=6 trace
trace

c1f12e0109
[Firefox:12 hits: 04-28 to 05-10] none[4] Win2K-f 21 of 31 00:43:59 00:43:59 1 none none:none
none|none none trace

3520abf6e9
[Firefox: 2 hits: 04-27 to 05-09] none[4] Win2K-f 16 of 31 08:06:58 08:06:58 1 none none:none
none|none none trace

1a2c0e6130
[Firefox:380 hits: 12-31 to 05-11] 048df78048 [0] WinXP 29 of 29 08:49:51 08:49:51 1 none ASM:Graph
none|none 100% lines=61 trace

7a393628ea
NEW none[4] WinXP 30 of 32 10:42:23 10:42:23 1 none none:none
ASProtect| none trace

eab86f961f
NEW none[4] WinXP
Win2K-f 27 of 32 03:01:20 23:36:05 2 none none:none
ASProtect| none trace

bce12aa21f
NEW none[4] WinXP 31 of 33 11:36:53 13:52:10 2 none none:none
PolyEnE| none trace

058266b5f3
NEW none[4] WinXP 28 of 32 13:19:16 13:19:16 1 none none:none
ASProtect| none trace

a897de9358
NEW none[4] WinXP 30 of 32 00:55:51 00:55:51 1 none none:none
PolyEnE| none trace

fd0bf48a75
[Firefox: 8 hits: 04-28 to 05-08] none[3] WinXP 20 of 32 18:59:11 18:59:11 1 none none:none
ASProtect| none trace

c467e7bae1
NEW none[4] WinXP 26 of 32 12:11:23 12:11:23 1 none none:none
none|none none trace

9a480af5c4
[Firefox: 2 hits: 07-25 to 11-10] none[4] Win2K-f 29 of 31 04:24:05 04:24:05 1 none none:none
ASPack| none trace

8f367186c3
[Firefox:68 hits: 12-27 to 05-10] 01a06977c4 [0] Win2K-f
WinXP 14 of 32 03:02:28 11:05:09 4 none ASM:Graph
TXT2COM| 0% lines=0 trace