Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

17 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

ac74a41741
NEW none[4] Win2K-f 27 of 32 13:17:12 13:17:12 1 none none:none
none|none none trace

4459a4a28b
NEW none[4] WinXP 0 of 0 08:45:43 08:45:43 1 none none:none
FSG| none trace

1e5df7ba74
[Firefox:14 hits: 03-24 to 05-16] a5331b711f [0] WinXP 31 of 32 05:03:47 05:03:47 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

206797614d
[Firefox: 2 hits: 05-01 to 05-01] none[4] Win2K-f 24 of 30 16:33:53 16:33:53 1 none none:none
Obsidium| none trace

f58222344f
[Firefox: 9 hits: 12-31 to 05-06] 2a56436a64 [0] WinXP 28 of 31 10:25:46 10:25:46 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns trace

59754a184b
[Firefox: 2 hits: 05-12 to 05-12] none[4] Win2K-f 27 of 32 17:19:49 17:19:49 1 none none:none
none|none none trace

d166d2a877
NEW none[4] Win2K-f 0 of 0 13:21:03 13:21:03 1 none none:none
FSG| none trace

76b4ab852e
[Firefox:49 hits: 04-29 to 05-16] none[4] WinXP 12 of 30 13:10:10 14:48:58 3 none none:none
none|none none trace

93282471f7
[Firefox:18 hits: 04-28 to 05-16] 95951dee58 [0] Win2K-f 19 of 30 01:26:05 01:26:05 1 none ASM:Graph
ASProtect| 0% lines=0 trace

14ef234ad3
[Firefox:14 hits: 04-29 to 05-15] none[4] WinXP 23 of 31 08:24:32 08:24:32 1 none none:none
none|none none trace

af98fe0c94
[Firefox:66 hits: 04-27 to 05-16] 480d076a0a [0] Win2K-f 20 of 31 14:21:09 14:21:09 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

641074f59d
NEW none[4] WinXP 0 of 0 17:01:23 17:01:23 1 none none:none
PolyEnE| none trace

d42c1cc7c0
[Firefox:274 hits: 05-01 to 05-13] af9ca5bed1 [0] WinXP 29 of 29 20:52:01 20:52:25 2 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1017 hits: 05-01 to 05-16] 40f7f463c4 [0] WinXP 29 of 29 10:47:44 22:57:50 3 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

07177edf82
NEW none[4] WinXP 0 of 0 20:41:11 20:41:11 1 none none:none
PolyEnE| none trace

f3c3478952
[Firefox: 2 hits: 04-30 to 05-01] none[4] Win2K-f 21 of 31 21:35:15 21:35:15 1 none none:none
none|none none trace

09904249fd
NEW none[4] WinXP 27 of 32 12:17:47 12:17:47 1 none none:none
none|none none trace

a2a036466a
[Firefox:205 hits: 05-05 to 05-16] none[4] Win2K-f
WinXP 14 of 32 02:11:36 22:19:33 9 none none:none
none|none none trace

1ab4d3d7b6
[Firefox: 9 hits: 04-10 to 05-13] cc366b3f6c [0] WinXP 29 of 32 05:04:43 05:04:43 1 none ASM:Graph
none|none 54% lines=287
embedded dns trace

53123fadcc
[Firefox:48 hits: 01-26 to 05-16] none[4] WinXP 13 of 32 04:08:54 04:08:54 1 none none:none
none|none none trace

7fdfe363d5
[Firefox:2620 hits: 12-31 to 05-16] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 01:04:56 23:58:19 10 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

7f60162c2c
[Firefox:1287 hits: 12-31 to 05-16] 1aad8e4632 [0] WinXP 25 of 25 01:20:06 11:56:46 2 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

468140ed8f
[Firefox: 4 hits: 05-07 to 05-14] none[4] Win2K-f 19 of 32 06:25:56 06:25:56 1 none none:none
none|none none trace

741e3b03b3
[Firefox:27 hits: 09-28 to 05-15] e0197e8a64 [0] WinXP 31 of 32 00:10:51 00:10:51 1 none ASM:Graph
none|none 100% lines=62 trace

c6f17a444e
NEW none[4] Win2K-f 27 of 31 01:01:18 01:01:18 1 none none:none
none|none none trace

b4ad631671
[Firefox: 8 hits: 04-29 to 05-15] 5890f017cc [0] WinXP 18 of 32 14:20:28 14:20:28 1 none ASM:Graph
StarForce| 87% lines=28 trace

831f4ee0a7
[Firefox:590 hits: 07-11 to 05-16] eb7546c600 [0] WinXP 29 of 29 01:14:51 12:57:08 2 none ASM:Graph
none|none 100% lines=61 trace

4620861e2d
[Firefox:14 hits: 04-27 to 05-16] none[4] WinXP 11 of 31 16:58:38 16:58:38 1 none none:none
StarForce| none trace

5f78ff609d
[Firefox:1270 hits: 04-27 to 05-16] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 00:24:08 23:51:14 33 none ASM:Graph
none|none 46% lines=4 trace

2cbd59e102
[Firefox:11 hits: 12-29 to 05-01] a3aefdb837 [0] WinXP 9 of 32 05:58:06 05:58:06 1 none ASM:Graph
ASPack| 62% lines=607
embedded dns trace

3a93071783
[Firefox: 6 hits: 08-29 to 03-04] f9fee24e84 [0] WinXP 29 of 32 22:32:36 22:32:36 1 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

7d99b0e910
[Firefox:2977 hits: 12-31 to 05-16] 7a70e1b592 [0] WinXP 26 of 28 07:02:06 19:11:42 6 none ASM:Graph
PolyEnE| 99% lines=68 trace

dc8e1c63cd
[Firefox:89 hits: 12-27 to 05-16] e0eb8646ee [0] Win2K-f 22 of 32 10:16:58 10:16:58 1 none ASM:Graph
none|none 62% lines=601
embedded dns trace

7e28dac8de
[Firefox:20 hits: 04-27 to 05-16] none[4] WinXP 18 of 32 12:12:24 12:12:24 1 none none:none
none|none none trace

b3e91556b1
NEW b3e91556b1 [1] Win2K-f 3 of 32 14:51:35 14:51:35 1 none ASM:Graph
StarForce| 44% lines=88 trace

c1f12e0109
[Firefox:19 hits: 04-28 to 05-16] none[4] Win2K-f
WinXP 21 of 31 06:54:16 08:01:06 2 none none:none
none|none none trace

0872b9ef16
NEW none[4] WinXP 17 of 32 12:14:55 12:14:55 1 none none:none
none|none none trace

1a2c0e6130
[Firefox:385 hits: 12-31 to 05-13] 048df78048 [0] WinXP 29 of 29 22:19:02 22:19:02 1 none ASM:Graph
none|none 100% lines=61 trace

cb89ccfe52
[Firefox:11 hits: 04-29 to 05-16] 881f6fa4b7 [0] Win2K-f 20 of 31 12:11:05 12:11:05 1 none ASM:Graph
TXT2COM| 59% lines=406
embedded dns trace

4b88366043
NEW none[4] Win2K-f 22 of 32 02:10:11 02:10:11 1 none none:none
none|none none trace

696210cb5e
NEW none[4] WinXP 27 of 32 22:14:02 22:14:02 1 none none:none
none|none none trace

92719eefc9
NEW none[4] WinXP 29 of 32 06:08:06 06:08:06 1 none none:none
ASPack| none trace

8f367186c3
[Firefox:77 hits: 12-27 to 05-16] 01a06977c4 [0] Win2K-f 14 of 32 03:54:01 03:54:01 1 none ASM:Graph
TXT2COM| 0% lines=0 trace

567de33f60
NEW none[4] WinXP 18 of 32 06:44:57 06:44:57 1 none none:none
TXT2COM| none trace