Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

08 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

09b3eade33
[Firefox: 2 hits: 05-11 to 05-11] none[4] WinXP 31 of 31 14:03:10 14:03:10 1 none none:none
PolyEnE| none trace

b4ad631671
[Firefox:15 hits: 04-29 to 06-07] 5890f017cc [0] Win2K-f 18 of 32 03:02:43 03:02:43 1 none ASM:Graph
StarForce| 87% lines=28 trace

7eb0b30e29
NEW none[4] Win2K-f
WinXP 14 of 32 09:28:39 13:17:59 3 none none:none
none|none none trace

1f7d55f6f0
NEW none[4] WinXP 30 of 32 01:52:51 01:52:51 1 none none:none
PolyEnE| none trace

831f4ee0a7
[Firefox:624 hits: 07-11 to 06-07] eb7546c600 [0] WinXP 29 of 29 05:06:35 22:34:52 5 none ASM:Graph
none|none 100% lines=61 trace

893403af1c
NEW none[4] Win2K-f 13 of 32 09:31:57 09:31:57 1 none none:none
none|none none trace

2a80d0e111
NEW none[4] Win2K-f 15 of 32 01:06:39 01:06:39 1 none none:none
none|none none trace

5f78ff609d
[Firefox:1504 hits: 04-27 to 06-07] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 00:10:27 08:49:05 6 none ASM:Graph
none|none 46% lines=4 trace

ed458d58bb
NEW none[4] Win2K-f 28 of 32 05:52:47 05:52:47 1 none none:none
none|none none trace

986b59708d
[Firefox:290 hits: 05-03 to 05-22] 8a00217866 [0] WinXP 29 of 29 10:32:47 10:32:47 1 none ASM:Graph
PolyEnE| 100% lines=57 trace

7d99b0e910
[Firefox:3031 hits: 12-31 to 06-07] 7a70e1b592 [0] WinXP 26 of 28 13:17:45 21:31:08 7 none ASM:Graph
PolyEnE| 99% lines=68 trace

76b4ab852e
[Firefox:57 hits: 04-29 to 05-23] none[4] Win2K-f 12 of 30 07:10:59 07:10:59 1 none none:none
none|none none trace

136a7a90d2
NEW none[4] Win2K-f 28 of 32 06:28:24 06:28:24 1 none none:none
none|none none trace

dc8e1c63cd
[Firefox:99 hits: 12-27 to 05-23] e0eb8646ee [0] Win2K-f
WinXP 22 of 32 06:32:58 12:01:56 4 none ASM:Graph
none|none 62% lines=601
embedded dns trace

5ee4121e1e
[Firefox:65 hits: 05-29 to 06-07] 51c1525417 [0] Win2K-f 14 of 32 05:44:26 05:44:26 1 none none:none
Obsidium| none trace

890fb4fa10
[Firefox:48 hits: 12-27 to 06-07] b9c7f08a57 [0] Win2K-f 19 of 32 02:09:18 02:09:18 1 none ASM:Graph
ASProtect| 3% lines=393
embedded dns trace

c1f12e0109
[Firefox:21 hits: 04-28 to 05-17] none[4] WinXP 21 of 31 07:40:13 07:40:13 1 none none:none
none|none none trace

1a2c0e6130
[Firefox:405 hits: 12-31 to 06-07] 048df78048 [0] WinXP 29 of 29 03:13:03 19:07:38 3 none ASM:Graph
none|none 100% lines=61 trace

dced05ccb1
NEW none[4] WinXP 28 of 32 09:12:45 09:12:45 1 none none:none
none|none none trace

d42c1cc7c0
[Firefox:285 hits: 05-01 to 06-07] af9ca5bed1 [0] WinXP 29 of 29 14:12:15 14:12:15 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

ce5bde2794
NEW none[4] Win2K-f 29 of 32 09:07:41 09:07:41 1 none none:none
none|none none trace

a12cab51ef
[Firefox:1038 hits: 05-01 to 06-07] 40f7f463c4 [0] WinXP 29 of 29 07:34:04 20:39:49 4 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

07177edf82
[Firefox: 3 hits: 05-17 to 05-30] ca4413b3c2 [0] WinXP 0 of 0 21:51:37 21:51:37 1 none ASM:Graph
PolyEnE| 47% lines=153 trace

03f912899b
[Firefox: 8 hits: 12-14 to 05-19] 83893bd25d [0] WinXP 32 of 32 07:23:48 07:23:48 1 none ASM:Graph
none|none 100% lines=65 trace

a2a036466a
[Firefox:264 hits: 05-05 to 06-06] none[4] WinXP 14 of 32 00:09:47 00:09:47 1 none none:none
none|none none trace

dc8e1c63cd
[Firefox:99 hits: 12-27 to 05-23]
e6ae8c600b
NEW e0eb8646ee [0]
none [4] WinXP 13 of 32 12:01:56 12:01:56 1 none ASM:Graph
none:none
none|none
none|none lines=601
embedded dns
none trace
trace