Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6fe66ff280
NEW		 none[4] WinXP 30 of 32 02:45:59 02:45:59 1 none none:none
 PolyEnE| none trace
ef365a6a95
NEW		 none[none] Win2K-f 28 of 32 08:21:05 08:21:05 1 none none:none
 none|none none none
d0dffaf5fd
NEW		 none[4] Win2K-f 14 of 32 05:18:52 05:18:52 1 none none:none
 none|none none trace
a4f3cb6d36
NEW		 none[0] Win2K-f 27 of 32 02:45:02 02:45:02 1 none none:none
 none|none none none
8b90a67616
NEW		 none[4] WinXP 27 of 32 02:12:57 02:12:57 1 none none:none
 none|none none trace
e874ba9dd0
NEW		 none[none] Win2K-f 7 of 32 02:06:31 02:06:31 1 none none:none
 none|none none none
df17a625ee
[Firefox:443 hits: 05-04 to 05-12]		 none[3] WinXP 29 of 29 11:32:13 11:32:13 1 none none:none
 ASPack| none trace
dae8d145fb
NEW		 none[4] WinXP 17 of 32 14:50:10 14:50:10 1 none none:none
 none|none none trace
c611c30d42
NEW		 8021c7f7aa [0] Win2K-f 19 of 32 11:56:33 11:56:33 1 none ASM:Graph
 none|none 60% lines=0 trace
c83a34840a
NEW		 none[4] Win2K-f 28 of 32 14:51:43 14:51:43 1 none none:none
 none|none none trace
170e8d6dd2
NEW		 none[4] WinXP 27 of 32 06:13:48 06:13:48 1 none none:none
 none|none none trace
76b4ab852e
[Firefox:40 hits: 04-29 to 05-12]		 none[4] WinXP
Win2K-f		 12 of 30 08:31:56 23:35:18 3 none none:none
 none|none none trace
14ef234ad3
[Firefox: 8 hits: 04-29 to 05-08]		 none[4] Win2K-f 23 of 31 16:13:17 17:42:03 2 none none:none
 none|none none trace
e534cb4332
NEW		 none[none] Win2K-f 28 of 32 06:55:44 06:55:44 1 none none:none
 none|none none none
b657a04386
NEW		 none[none] Win2K-f 31 of 32 10:57:04 10:57:04 1 none none:none
 eXPressor| none none
3f5ec58a6b
[Firefox:16 hits: 04-24 to 05-12]		 4a77430a59 [0] WinXP 30 of 32 20:02:09 20:03:16 2 none ASM:Graph
 PolyEnE| 99% lines=70 trace
ab48a97a5d
[Firefox: 5 hits: 12-28 to 05-11]		 81e9c5d188 [0] Win2K-f 12 of 31 11:39:32 11:39:32 1 none ASM:Graph
 ASProtect| 57% lines=419
embedded dns		 trace
af98fe0c94
[Firefox:57 hits: 04-27 to 05-12]		 480d076a0a [0] Win2K-f 20 of 31 01:46:19 12:16:52 2 none ASM:Graph
 ASProtect| 57% lines=422
embedded dns		 trace
3b628e4beb
NEW		 3b628e4beb [1] WinXP 28 of 32 11:13:16 11:13:16 1 none ASM:Graph
 Stranik| 36% lines=6 trace
81087261e6
NEW		 none[4] WinXP 27 of 32 23:44:43 23:44:43 1 none none:none
 none|none none trace
86f6262552
NEW		 none[4] Win2K-f 27 of 32 08:58:25 08:58:25 1 none none:none
 none|none none trace
d42c1cc7c0
[Firefox:273 hits: 05-01 to 05-10]		 af9ca5bed1 [0] WinXP 29 of 29 18:14:07 18:14:07 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1012 hits: 05-01 to 05-10]		 40f7f463c4 [0] WinXP 29 of 29 06:35:33 06:35:33 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
6f89425f8a
[Firefox:13 hits: 02-08 to 05-03]		 6480c2f949 [0] WinXP 30 of 32 15:06:15 15:06:15 1 none ASM:Graph
 PolyEnE| 100% lines=73 trace
d94d21fc29
[Firefox: 4 hits: 12-28 to 05-06]		 9deff996b5 [0] Win2K-f 12 of 32 10:49:19 10:49:19 1 none ASM:Graph
 ASProtect| 57% lines=423
embedded dns		 trace
161e73cdfc
NEW		 none[4] WinXP 29 of 32 09:16:14 09:16:14 1 none none:none
 none|none none trace
a2a036466a
[Firefox:150 hits: 05-05 to 05-12]		 none[4] Win2K-f
WinXP		 14 of 32 06:10:01 21:19:13 16 none none:none
 none|none none trace
1ab4d3d7b6
[Firefox: 7 hits: 04-10 to 05-08]		 cc366b3f6c [0] WinXP 29 of 32 02:32:30 12:48:03 2 none ASM:Graph
 none|none 54% lines=287
embedded dns		 trace
b490cdeea2
NEW		 none[none] WinXP 26 of 32 04:08:07 04:08:07 1 none none:none
 none|none none none
53123fadcc
[Firefox:43 hits: 01-26 to 05-12]		 none[4] WinXP 13 of 32 21:43:31 21:43:31 1 none none:none
 none|none none trace
3a65749370
[Firefox: 5 hits: 05-05 to 05-11]		 c0e04edf74 [0] WinXP 23 of 31 13:11:45 13:11:45 1 none ASM:Graph
 TXT2COM| 59% lines=407
embedded dns		 trace
7fdfe363d5
[Firefox:2604 hits: 12-31 to 05-11]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 17:57:33 22:00:09 2 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
468140ed8f
[Firefox: 2 hits: 05-07 to 05-11]		 none[4] Win2K-f 19 of 32 12:21:31 12:21:31 1 none none:none
 none|none none trace
9392e91e23
NEW		 none[4] WinXP 18 of 32 05:43:34 05:43:34 1 none none:none
 none|none none trace
f217f876d4
NEW		 none[none] WinXP 16 of 32 04:45:50 04:45:50 1 none none:none
 none|none none none
43b52daf45
NEW		 none[4] Win2K-f 28 of 33 04:16:31 04:16:31 1 none none:none
 none|none none trace
831f4ee0a7
[Firefox:585 hits: 07-11 to 05-12]		 eb7546c600 [0] WinXP 29 of 29 09:57:55 12:00:44 2 none ASM:Graph
 none|none 100% lines=61 trace
5f78ff609d
[Firefox:1113 hits: 04-27 to 05-12]		 d4a06bdc3a [0] Win2K-f
WinXP		 21 of 32 00:30:15 23:33:25 49 none ASM:Graph
 none|none 46% lines=4 trace
3ae357d17b
[Firefox:703 hits: 05-01 to 05-11]		 462a7be171 [0] WinXP 29 of 29 05:32:39 05:32:39 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
5ddb8a81f2
NEW		 none[4] WinXP 30 of 32 05:00:41 05:00:41 1 none none:none
 none|none none trace
9928a1e660
[Firefox:17 hits: 10-06 to 05-12]		 28c8dadabf [0] Win2K-f 31 of 32 16:28:16 16:28:16 1 none ASM:Graph
 none|none 99% lines=104
embedded dns		 trace
7d99b0e910
[Firefox:2967 hits: 12-31 to 05-12]		 7a70e1b592 [0] WinXP 26 of 28 00:25:50 23:01:02 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7e28dac8de
[Firefox:13 hits: 04-27 to 05-10]		 none[4] Win2K-f
WinXP		 18 of 32 12:27:53 22:39:10 3 none none:none
 none|none none trace
eb41da3253
NEW		 none[4] WinXP 30 of 32 16:20:40 16:21:03 2 none none:none
 PolyEnE| none trace
a680f4cf43
NEW		 none[none] Win2K-f 27 of 32 00:22:01 00:22:01 1 none none:none
 none|none none none
3520abf6e9
[Firefox: 3 hits: 04-27 to 05-12]		 none[4] Win2K-f 16 of 31 03:22:53 03:22:53 1 none none:none
 none|none none trace
c1f12e0109
[Firefox:13 hits: 04-28 to 05-12]		 none[4] Win2K-f 21 of 31 05:38:33 05:38:33 1 none none:none
 none|none none trace
a71d671241
NEW		 none[4] Win2K-f 28 of 32 20:04:03 20:04:03 1 none none:none
 none|none none trace
1a2c0e6130
[Firefox:381 hits: 12-31 to 05-12]		 048df78048 [0] WinXP 29 of 29 00:31:02 10:53:21 4 none ASM:Graph
 none|none 100% lines=61 trace
cb89ccfe52
[Firefox: 8 hits: 04-29 to 05-10]		 881f6fa4b7 [0] Win2K-f 20 of 31 13:14:53 13:14:53 1 none ASM:Graph
 TXT2COM| 59% lines=406
embedded dns		 trace
2f731e8b37
NEW		 none[4] WinXP 24 of 32 08:31:12 08:31:12 1 none none:none
 none|none none trace
e9ddb56723
NEW		 none[none] WinXP 11 of 32 11:41:22 11:41:22 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:431 hits: 05-02 to 05-10]		 d9e9662db1 [0] WinXP 29 of 29 17:51:38 17:51:38 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
e5d062be59
[Firefox: 3 hits: 12-28 to 05-08]		 none[4] Win2K-f 11 of 32 03:40:34 03:40:34 1 none none:none
 ASPack| none trace
8f367186c3
[Firefox:72 hits: 12-27 to 05-12]		 01a06977c4 [0] WinXP
Win2K-f		 14 of 32 00:39:16 10:08:42 2 none ASM:Graph
 TXT2COM| 0% lines=0 trace