Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

23 May 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

20dd344766
NEW none[4] WinXP 27 of 32 08:58:57 08:58:57 1 none none:none
none|none none trace

22d5ab2643
NEW none[4] WinXP 27 of 32 09:29:06 09:29:06 1 none none:none
none|none none trace

1f92e7b9e3
NEW
bd24da5b0c
NEW 1f92e7b9e3 [1]
none [4] WinXP 29 of 32 10:39:44 10:39:44 1 none ASM:Graph
none:none
StarForce|
ASProtect| lines=6
none trace
trace

e99b421746
NEW none[4] Win2K-f 27 of 32 03:40:24 03:40:24 1 none none:none
none|none none trace

dad909dd0c
NEW none[4] Win2K-f 28 of 32 00:53:16 00:53:16 1 none none:none
none|none none trace

f0e02bee5f
[Firefox: 6 hits: 04-27 to 05-21] none[4] WinXP 22 of 31 13:19:05 13:19:05 1 none none:none
none|none none trace

9f536e3f54
NEW none[4] WinXP 29 of 32 11:20:34 11:20:34 1 none none:none
ASProtect| none trace

62c9e91db4
NEW none[4] WinXP 22 of 32 08:15:16 08:15:16 1 none none:none
none|none none trace

76b4ab852e
[Firefox:53 hits: 04-29 to 05-22] none[4] WinXP
Win2K-f 12 of 30 02:35:08 06:49:29 4 none none:none
none|none none trace

3997bd9063
NEW none[4] Win2K-f 27 of 32 00:36:16 00:36:16 1 none none:none
none|none none trace

3f5ec58a6b
[Firefox:22 hits: 04-24 to 05-21] 4a77430a59 [0] WinXP 30 of 32 02:37:23 02:37:23 1 none ASM:Graph
PolyEnE| 99% lines=70 trace

ea8c4c6865
NEW none[4] WinXP 28 of 32 13:01:40 13:01:40 1 none none:none
none|none none trace

e25ac584b7
NEW none[4] Win2K-f 24 of 32 09:00:04 09:00:04 1 none none:none
none|none none trace

1f92e7b9e3
NEW 1f92e7b9e3 [1] WinXP 21 of 32 03:34:29 10:39:44 2 none ASM:Graph
StarForce| 50% lines=6 trace

d88ce21f56
NEW none[4] WinXP 29 of 32 17:28:25 17:28:25 1 none none:none
none|none none trace

e8d4d8cde1
[Firefox:229 hits: 03-31 to 05-20] fda109a6fd [0] Win2K-f
WinXP 13 of 31 11:17:56 13:54:56 24 none ASM:Graph
ASProtect| 64% lines=583
embedded dns trace

8f808e3467
NEW none[4] WinXP 12 of 31 06:47:18 06:47:18 1 none none:none
none|none none trace

d42c1cc7c0
[Firefox:277 hits: 05-01 to 05-18] af9ca5bed1 [0] WinXP 29 of 29 16:23:12 16:23:12 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1026 hits: 05-01 to 05-22] 40f7f463c4 [0] WinXP 29 of 29 17:54:52 17:54:52 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

382279b44f
NEW none[4] WinXP
Win2K-f 19 of 32 00:24:01 04:15:41 2 none none:none
Armadillo| none trace

f3c3478952
[Firefox: 3 hits: 04-30 to 05-17] none[4] Win2K-f 21 of 31 10:51:31 10:51:31 1 none none:none
none|none none trace

1628787153
NEW none[3] Win2K-f 4 of 32 03:17:26 03:17:26 1 none none:none
EXECrypto| none trace

181239b848
NEW none[4] WinXP 31 of 33 14:15:20 14:15:20 1 none none:none
PolyEnE| none trace

a2a036466a
[Firefox:250 hits: 05-05 to 05-22] none[4] Win2K-f
WinXP 14 of 32 00:28:55 16:27:11 7 none none:none
none|none none trace

fbe9691368
NEW none[4] WinXP 22 of 32 06:29:46 06:29:46 1 none none:none
none|none none trace

fb39015df2
NEW none[4] WinXP 32 of 32 00:46:10 00:46:10 1 none none:none
PolyEnE| none trace

9a331ca0d6
NEW none[4] WinXP 31 of 32 13:53:44 13:53:44 1 none none:none
PolyEnE| none trace

38c1892a84
NEW none[4] WinXP 28 of 32 08:35:54 08:35:54 1 none none:none
none|none none trace

7b61cddb7d
NEW none[4] Win2K-f 28 of 32 00:19:02 00:19:02 1 none none:none
none|none none trace

7f60162c2c
[Firefox:1299 hits: 12-31 to 05-22] 1aad8e4632 [0] WinXP 25 of 25 01:08:38 18:09:12 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

b4ad631671
[Firefox:12 hits: 04-29 to 05-20] 5890f017cc [0] WinXP 18 of 32 14:30:45 14:30:45 1 none ASM:Graph
StarForce| 87% lines=28 trace

d11443eb92
NEW none[4] Win2K-f 27 of 32 06:46:50 06:46:50 1 none none:none
none|none none trace

831f4ee0a7
[Firefox:608 hits: 07-11 to 05-22] eb7546c600 [0] WinXP 29 of 29 08:03:19 16:23:03 2 none ASM:Graph
none|none 100% lines=61 trace

5f78ff609d
[Firefox:1451 hits: 04-27 to 05-22] d4a06bdc3a [0] WinXP
Win2K-f 21 of 32 02:05:46 17:53:49 33 none ASM:Graph
none|none 46% lines=4 trace

96c5f931fe
NEW none[4] WinXP 32 of 32 00:35:05 00:35:05 1 none none:none
PolyEnE| none trace

7d99b0e910
[Firefox:2993 hits: 12-31 to 05-22] 7a70e1b592 [0] WinXP 26 of 28 02:07:46 09:51:34 3 none ASM:Graph
PolyEnE| 99% lines=68 trace

7e28dac8de
[Firefox:25 hits: 04-27 to 05-22] none[4] Win2K-f 18 of 32 15:56:11 15:56:11 1 none none:none
none|none none trace

dc8e1c63cd
[Firefox:97 hits: 12-27 to 05-22] e0eb8646ee [0] Win2K-f 22 of 32 05:18:00 15:38:35 2 none ASM:Graph
none|none 62% lines=601
embedded dns trace

890fb4fa10
[Firefox:44 hits: 12-27 to 05-22] b9c7f08a57 [0] WinXP 19 of 32 03:47:30 03:47:30 1 none ASM:Graph
ASProtect| 3% lines=393
embedded dns trace

1a2c0e6130
[Firefox:393 hits: 12-31 to 05-21] 048df78048 [0] WinXP 29 of 29 08:20:01 17:47:29 2 none ASM:Graph
none|none 100% lines=61 trace

34d28cbf91
NEW none[4] Win2K-f 28 of 32 13:49:09 13:49:09 1 none none:none
ASProtect| none trace

cb89ccfe52
[Firefox:12 hits: 04-29 to 05-17] 881f6fa4b7 [0] Win2K-f 20 of 31 11:47:13 11:47:13 1 none ASM:Graph
TXT2COM| 59% lines=406
embedded dns trace

bec71ba83f
NEW none[4] WinXP 21 of 32 00:47:51 00:47:51 1 none none:none
PolyEnE| none trace

ec82348c4c
NEW none[4] WinXP 30 of 32 09:22:57 09:22:57 1 none none:none
FSG| none trace

1f92e7b9e3
NEW
e7db505624
NEW 1f92e7b9e3 [1]
none [4] WinXP 29 of 32 03:34:29 03:34:29 1 none ASM:Graph
none:none
StarForce|
none|none lines=6
none trace
trace

fd0bf48a75
[Firefox:12 hits: 04-28 to 05-22] none[3] WinXP 20 of 32 00:14:08 00:14:08 1 none none:none
ASProtect| none trace