Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

22 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

90aa68c64b
NEW none[4] WinXP 14 of 32 15:58:31 15:58:31 1 none none:none
Armadillo| none trace

fc9addab43
[Firefox: 5 hits: 05-08 to 05-15] none[4] Win2K-f
WinXP 21 of 31 04:48:32 23:18:41 2 none none:none
none|none none trace

e5b24507a9
NEW none[4] WinXP 28 of 32 01:28:44 01:28:44 1 none none:none
none|none none trace

89bc2a6839
NEW 33f8f7e2e1 [0] WinXP 24 of 32 11:19:12 11:19:12 1 none ASM:Graph
ASProtect| 57% lines=418
embedded dns trace

a99f17e623
[Firefox:20 hits: 03-28 to 04-24] 87dfec58db [0] WinXP 31 of 32 12:46:05 12:46:05 1 none ASM:Graph
PolyEnE| 99% lines=69 trace

df17a625ee
[Firefox:448 hits: 05-04 to 05-21] none[3] WinXP 29 of 29 04:18:15 04:18:15 1 none none:none
ASPack| none trace

a7e3664263
NEW none[4] Win2K-f 28 of 32 19:15:59 19:15:59 1 none none:none
none|none none trace

e54295a010
NEW none[4] WinXP 28 of 32 04:41:44 04:41:44 1 none none:none
none|none none trace

ed458d58bb
NEW none[4] WinXP 28 of 32 21:07:53 21:07:53 1 none none:none
none|none none trace

0ab222cebd
NEW none[4] Win2K-f 29 of 32 06:03:26 06:03:26 1 none none:none
none|none none trace

e1e291f120
NEW none[4] Win2K-f 29 of 32 08:44:36 08:44:36 1 none none:none
none|none none trace

986b59708d
[Firefox:289 hits: 05-03 to 05-19] 8a00217866 [0] WinXP 29 of 29 08:14:51 08:14:51 1 none ASM:Graph
PolyEnE| 100% lines=57 trace

76b4ab852e
[Firefox:52 hits: 04-29 to 05-17] none[4] Win2K-f 12 of 30 07:11:08 07:11:08 1 none none:none
none|none none trace

15bee5b293
NEW none[4] WinXP 27 of 32 06:41:34 11:27:52 2 none none:none
StarForce| none trace

14ef234ad3
[Firefox:15 hits: 04-29 to 05-17] none[4] WinXP
Win2K-f 23 of 31 15:45:58 16:58:51 2 none none:none
none|none none trace

6c3c0f78a2
NEW none[4] WinXP 30 of 32 21:11:43 21:11:43 1 none none:none
PolyEnE| none trace

af98fe0c94
[Firefox:71 hits: 04-27 to 05-21] 480d076a0a [0] WinXP
Win2K-f 20 of 31 16:48:40 21:36:51 2 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

f4b63ac1b1
NEW none[4] Win2K-f 29 of 32 12:29:58 12:29:58 1 none none:none
ASProtect| none trace

1f92e7b9e3
NEW 1f92e7b9e3 [1] WinXP 21 of 32 18:08:19 18:08:19 1 none ASM:Graph
StarForce| 50% lines=6 trace

ad63c09b6c
NEW none[4] WinXP 28 of 33 10:17:44 11:20:15 2 none none:none
StarForce| none trace

382279b44f
NEW none[4] Win2K-f 19 of 32 18:10:54 18:10:54 1 none none:none
Armadillo| none trace

a12cab51ef
[Firefox:1025 hits: 05-01 to 05-21] 40f7f463c4 [0] WinXP 29 of 29 18:02:06 18:02:06 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

8f507184c7
NEW none[4] WinXP 29 of 32 12:45:28 12:45:28 1 none none:none
PolyEnE| none trace

249b417917
NEW none[4] Win2K-f 29 of 33 09:21:40 09:21:40 1 none none:none
none|none none trace

9b0c5ed538
[Firefox: 5 hits: 05-02 to 05-21] none[4] Win2K-f 22 of 31 03:22:35 03:22:35 1 none none:none
none|none none trace

d94d21fc29
[Firefox: 6 hits: 12-28 to 05-21] 9deff996b5 [0] WinXP 12 of 32 00:21:41 00:21:41 1 none ASM:Graph
ASProtect| 57% lines=423
embedded dns trace

699d2b9731
NEW none[3] WinXP 23 of 31 01:00:39 01:00:39 1 none none:none
ASProtect| none trace

1f455b02c6
[Firefox: 2 hits: 05-09 to 05-18] none[4] WinXP 26 of 32 23:54:12 23:54:12 1 none none:none
none|none none trace

1f92e7b9e3
NEW
f34f0ae5a4
NEW 1f92e7b9e3 [1]
none [4] WinXP 28 of 32 18:08:19 18:08:19 1 none ASM:Graph
none:none
StarForce|
none|none lines=6
none trace
trace

a2a036466a
[Firefox:240 hits: 05-05 to 05-21] none[4] Win2K-f
WinXP 14 of 32 00:25:07 23:55:16 10 none none:none
none|none none trace

910d190921
[Firefox: 3 hits: 05-03 to 05-05] none[4] WinXP 23 of 31 07:19:29 07:19:29 1 none none:none
none|none none trace

38c1892a84
NEW none[4] WinXP 28 of 32 14:41:44 14:41:44 1 none none:none
none|none none trace

53123fadcc
[Firefox:51 hits: 01-26 to 05-21] none[4] Win2K-f 13 of 32 11:03:44 11:03:44 1 none none:none
none|none none trace

7f60162c2c
[Firefox:1294 hits: 12-31 to 05-20] 1aad8e4632 [0] WinXP 25 of 25 13:37:13 18:29:25 5 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

831f4ee0a7
[Firefox:606 hits: 07-11 to 05-21] eb7546c600 [0] WinXP 29 of 29 02:01:55 19:06:53 2 none ASM:Graph
none|none 100% lines=61 trace

5f78ff609d
[Firefox:1414 hits: 04-27 to 05-21] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 00:22:07 23:34:25 37 none ASM:Graph
none|none 46% lines=4 trace

12018ab830
NEW none[4] WinXP 29 of 33 06:09:01 06:09:01 1 none none:none
ASProtect| none trace

04c8709d9c
NEW none[4] Win2K-f 27 of 32 09:08:14 09:08:14 1 none none:none
none|none none trace

7d99b0e910
[Firefox:2992 hits: 12-31 to 05-20] 7a70e1b592 [0] WinXP 26 of 28 15:02:03 15:02:03 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

7e28dac8de
[Firefox:24 hits: 04-27 to 05-21] none[4] Win2K-f 18 of 32 18:20:57 18:20:57 1 none none:none
none|none none trace

dc8e1c63cd
[Firefox:95 hits: 12-27 to 05-21] e0eb8646ee [0] WinXP
Win2K-f 22 of 32 05:58:27 23:17:21 2 none ASM:Graph
none|none 62% lines=601
embedded dns trace

890fb4fa10
[Firefox:43 hits: 12-27 to 05-10] b9c7f08a57 [0] Win2K-f 19 of 32 09:40:08 09:40:08 1 none ASM:Graph
ASProtect| 3% lines=393
embedded dns trace

131351dd21
NEW none[4] WinXP 20 of 32 13:34:30 13:34:30 1 none none:none
none|none none trace

44ded303fe
NEW none[4] WinXP 29 of 32 15:53:55 15:53:55 1 none none:none
none|none none trace

7a393628ea
[Firefox: 2 hits: 05-12 to 05-15] none[4] WinXP 30 of 32 01:50:49 01:50:49 1 none none:none
ASProtect| none trace

c99d0a41a1
NEW none[4] WinXP 28 of 32 21:21:05 21:21:05 1 none none:none
none|none none trace

58a922e43b
NEW none[4] Win2K-f 21 of 32 19:58:44 19:58:44 1 none none:none
none|none none trace

56ae35572e
[Firefox: 3 hits: 05-01 to 05-10] none[4] Win2K-f 27 of 31 17:26:40 17:26:40 1 none none:none
none|none none trace

e5d062be59
[Firefox: 7 hits: 12-28 to 05-16] none[4] Win2K-f 11 of 32 04:07:01 08:05:15 2 none none:none
ASPack| none trace

e7db505624
NEW none[4] Win2K-f 29 of 32 03:22:53 03:22:53 1 none none:none
none|none none trace

fd0bf48a75
[Firefox:11 hits: 04-28 to 05-16] none[3] Win2K-f 20 of 32 05:38:38 05:38:38 1 none none:none
ASProtect| none trace

8f367186c3
[Firefox:84 hits: 12-27 to 05-21] 01a06977c4 [0] Win2K-f
WinXP 14 of 32 01:36:19 23:57:36 2 none ASM:Graph
TXT2COM| 0% lines=0 trace