Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

17 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

b39dc45f85
NEW none[4] Win2K-f 0 of 0 03:38:18 03:38:18 1 none none:none
PolyEnE| none trace

f515fcc0f7
[Firefox:16 hits: 12-28 to 06-17] dc7696e295 [0] Win2K-f 14 of 32 08:48:48 08:48:48 1 none ASM:Graph
ASProtect| 57% lines=422
embedded dns trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21] none[4] Win2K-f
WinXP 33 of 33 14:16:32 23:59:35 7 none none:none
tElock| none trace

de6b9b443f
NEW none[4] Win2K-f 29 of 33 13:34:47 13:34:47 1 none none:none
none|none none trace

af29876940
NEW none[4] Win2K-f 32 of 33 19:25:39 19:25:39 1 none none:none
PolyEnE| none trace

df17a625ee
[Firefox:470 hits: 05-04 to 06-21] 9bbdd086c5 [0] WinXP 29 of 29 02:34:29 02:34:29 1 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

986b59708d
[Firefox:300 hits: 05-03 to 06-18] 8a00217866 [0] WinXP 29 of 29 11:55:50 11:59:04 2 none ASM:Graph
PolyEnE| 100% lines=57 trace

4e2c082051
[Firefox: 3 hits: 06-01 to 06-17] none[4] Win2K-f 27 of 32 12:53:47 12:53:47 1 none none:none
none|none none trace

735a809fc2
[Firefox: 2 hits: 06-10 to 06-17] none[3] WinXP 26 of 32 21:19:34 21:19:34 1 none none:none
none|none none trace

3f5ec58a6b
[Firefox:29 hits: 04-24 to 06-17] 4a77430a59 [0] WinXP 30 of 32 23:15:27 23:15:27 1 none ASM:Graph
PolyEnE| 99% lines=70 trace

168aab35a3
[Firefox:12 hits: 06-17 to 06-21] none[4] WinXP 31 of 33 16:54:09 16:54:09 1 none none:none
tElock| none trace

d42c1cc7c0
[Firefox:301 hits: 05-01 to 06-21] af9ca5bed1 [0] WinXP 29 of 29 14:32:10 14:32:10 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1064 hits: 05-01 to 06-21] 40f7f463c4 [0] WinXP 29 of 29 11:19:17 20:16:35 3 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

7452c8448d
NEW none[4] WinXP 30 of 32 18:32:11 18:32:11 1 none none:none
PolyEnE| none trace

cce9566ceb
[Firefox: 9 hits: 06-12 to 06-21] none[4] WinXP 31 of 32 13:11:16 13:11:16 1 none none:none
PolyEnE| none trace

3cd7958258
[Firefox: 2 hits: 06-17 to 06-19] none[4] WinXP 30 of 33 20:12:51 20:12:51 1 none none:none
tElock| none trace

a2a036466a
[Firefox:268 hits: 05-05 to 06-17] none[4] WinXP 14 of 32 02:24:04 02:24:04 1 none none:none
none|none none trace

4c3df24b32
[Firefox:16 hits: 06-17 to 06-21] 4c3df24b32 [1] Win2K-f 0 of 33 21:20:24 21:20:24 1 none ASM:Graph
Armadillo| 47% lines=81 trace

639a247ece
[Firefox:34 hits: 04-28 to 06-17] 29d53eec72 [0] Win2K-f 10 of 32 11:54:59 11:54:59 1 none ASM:Graph
StarForce| 77% lines=132 trace

6eddc8716c
NEW none[4] WinXP 31 of 33 21:30:45 21:30:45 1 none none:none
tElock| none trace

741e3b03b3
[Firefox:52 hits: 09-28 to 06-21] e0197e8a64 [0] WinXP 31 of 32 03:29:00 19:48:15 2 none ASM:Graph
none|none 100% lines=62 trace

0db5ae4dc2
NEW none[3] Win2K-f 0 of 0 02:13:14 02:13:14 1 none none:none
PolyEnE| none trace

b4ad631671
[Firefox:17 hits: 04-29 to 06-17] 5890f017cc [0] WinXP 18 of 32 14:13:18 14:13:18 1 none ASM:Graph
StarForce| 87% lines=28 trace

393d3a40db
[Firefox: 5 hits: 12-14 to 06-17] 8a0ff8065a [0] WinXP 31 of 32 19:16:41 19:16:41 1 none ASM:Graph
PolyEnE| 0% lines=76 trace

831f4ee0a7
[Firefox:653 hits: 07-11 to 06-21] eb7546c600 [0] WinXP 29 of 29 12:10:44 16:18:24 2 none ASM:Graph
none|none 100% lines=61 trace

5f78ff609d
[Firefox:1522 hits: 04-27 to 06-18] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 00:13:01 18:02:27 3 none ASM:Graph
none|none 46% lines=4 trace

4580d3e452
NEW 4580d3e452 [1] Win2K-f 12 of 33 01:52:24 01:52:24 1 none ASM:Graph
StarForce| 34% lines=2 trace

d7ba02173f
NEW d7ba02173f [1] WinXP 28 of 33 16:57:18 16:57:18 1 none ASM:Graph
Stranik| lines=10 trace

7d99b0e910
[Firefox:3077 hits: 12-31 to 06-21] 7a70e1b592 [0] WinXP 26 of 28 10:05:12 15:19:43 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

57ce4acac2
[Firefox:17 hits: 06-17 to 06-21] 57ce4acac2 [1] WinXP 0 of 33 13:40:33 13:40:33 1 none ASM:Graph
Armadillo| 47% lines=81 trace

4053a87494
[Firefox: 5 hits: 05-01 to 06-17] c1d7cc8d6d [0] Win2K-f 23 of 31 19:07:53 19:07:53 1 none ASM:Graph
TXT2COM| 59% lines=405
embedded dns trace

88b7cd9ba2
NEW none[3] Win2K-f 13 of 33 23:14:39 23:14:39 1 none none:none
none|none none trace

1a2c0e6130
[Firefox:433 hits: 12-31 to 06-21] 048df78048 [0] WinXP 29 of 29 22:43:01 22:43:01 1 none ASM:Graph
none|none 100% lines=61 trace

8907c36532
NEW none[2] Win2K-f 30 of 33 10:42:54 10:42:54 1 none none:none
ASPack| none trace

56f53343ce
NEW none[4] WinXP 29 of 33 10:33:04 10:33:04 1 none none:none
PolyEnE| none trace

4f887ca272
[Firefox:38 hits: 01-26 to 06-17] 4f887ca272 [1] Win2K-f 0 of 0 05:45:44 05:45:44 1 none ASM:Graph
Stranik| 36% lines=6 trace

1509c8d024
NEW none[4] Win2K-f 31 of 33 23:44:05 23:44:05 1 none none:none
tElock| none trace

ddd2a2b264
NEW none[4] Win2K-f 31 of 33 22:01:50 22:01:50 1 none none:none
tElock| none trace

50af665692
NEW none[4] WinXP 33 of 33 13:35:19 13:35:19 1 none none:none
PolyEnE| none trace

29a1127528
[Firefox: 3 hits: 06-11 to 06-17] none[4] WinXP 29 of 31 19:06:51 19:06:51 1 none none:none
PolyEnE| none trace

798619588e
NEW 798619588e [1] Win2K-f 31 of 33 13:41:46 13:41:46 1 none ASM:Graph
ASPack| lines=10 trace

8f367186c3
[Firefox:92 hits: 12-27 to 06-17] 01a06977c4 [0] WinXP
Win2K-f 14 of 32 15:56:04 22:04:00 3 none ASM:Graph
TXT2COM| 0% lines=0 trace

fd835d9616
[Firefox: 3 hits: 06-01 to 06-17] none[4] Win2K-f 30 of 32 15:18:34 15:18:34 1 none none:none
TXT2COM| none trace