Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

18 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

6ec2a8994b
NEW
857b781ca9
NEW none[4]
857b781ca9[1] WinXP 29 of 33 21:57:25 21:57:25 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

05ea62612c
[Firefox: 3 hits: 06-18 to 06-21]
3a0107380f
[Firefox: 3 hits: 06-18 to 06-21] none[4]
3a0107380f[1] Win2K-f 30 of 33 19:48:26 19:48:26 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
f685f8e027
[Firefox: 2 hits: 06-18 to 06-20] none[4]
f685f8e027[1] WinXP 28 of 33 10:16:10 10:16:10 1 none none:none
ASM:Graph
tElock|
Armadillo| 48% none
lines=82 trace
trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
73f1082158
[Firefox:43 hits: 06-18 to 06-21] none[4]
73f1082158[1] WinXP
Win2K-f 0 of 32 00:31:32 20:40:46 8 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21] none[4] WinXP
Win2K-f 33 of 33 00:31:32 23:37:23 36 none none:none
tElock| none trace

3f0a5b2ebe
[Firefox: 3 hits: 06-18 to 06-20]
c6bfb5f0f2
[Firefox: 3 hits: 06-18 to 06-20] none[4]
c6bfb5f0f2[1] WinXP
Win2K-f 28 of 32 03:22:39 20:10:27 2 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

68c00da3c5
NEW none[3] Win2K-f 11 of 33 18:34:26 18:34:26 1 none none:none
PolyEnE| none trace

1951eee0cd
NEW
e5e0dbde57
NEW 1951eee0cd [1]
none [4] Win2K-f 31 of 33 17:07:49 17:07:49 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

dfbaaf577c
NEW
f504b4af20
NEW none[4]
f504b4af20[1] Win2K-f 29 of 33 10:08:00 10:08:00 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

855987276d
NEW none[4] Win2K-f 31 of 33 16:31:19 16:31:19 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
b7082104e4
[Firefox: 7 hits: 06-18 to 06-20] none[4]
none [4] WinXP
Win2K-f 8 of 33 02:17:56 23:37:23 4 none none:none
none:none
tElock|
tElock| none
none trace
trace

02cab5983b
NEW none[4] Win2K-f 31 of 33 19:40:36 19:40:36 1 none none:none
tElock| none trace

5913ead1a1
NEW
ac99506c36
NEW 5913ead1a1 [1]
none [4] Win2K-f 31 of 33 18:52:18 18:52:18 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

8390780c27
[Firefox: 3 hits: 06-18 to 06-21] none[4] Win2K-f 30 of 32 13:45:35 13:45:35 1 none none:none
tElock| none trace

2e04b06527
NEW
5c054291de
NEW none[4]
5c054291de[1] Win2K-f 30 of 33 22:42:16 22:42:16 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

1951eee0cd
NEW 1951eee0cd [1] Win2K-f 27 of 33 17:07:49 17:07:49 1 none ASM:Graph
Armadillo| 47% lines=82 trace

07fa3e2807
NEW 07fa3e2807 [1] WinXP 29 of 33 15:48:15 15:48:15 1 none ASM:Graph
Armadillo| 47% lines=82 trace

23972eade5
NEW
a67016efe8
NEW 23972eade5 [1]
none [4] Win2K-f 31 of 33 13:32:18 13:32:18 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

168aab35a3
[Firefox:12 hits: 06-17 to 06-21] none[4] Win2K-f 31 of 33 08:14:04 08:14:04 1 none none:none
tElock| none trace

73ce2b74da
NEW 73ce2b74da [1] Win2K-f 3 of 33 00:30:07 00:30:07 1 none ASM:Graph
Armadillo| 47% lines=81 trace

bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18] none[4] Win2K-f 31 of 32 12:12:33 12:16:07 2 none none:none
PolyEnE| none trace

d42c1cc7c0
[Firefox:301 hits: 05-01 to 06-21] af9ca5bed1 [0] WinXP 29 of 29 01:35:34 18:01:19 3 none ASM:Graph
PolyEnE| 100% lines=54 trace

24acffe86e
NEW
a0d83e7d41
NEW 24acffe86e [1]
none [4] WinXP 30 of 32 19:16:41 19:16:41 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

a12cab51ef
[Firefox:1064 hits: 05-01 to 06-21] 40f7f463c4 [0] WinXP 29 of 29 11:47:05 19:50:15 4 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

1af57e7e9d
NEW 1af57e7e9d [1] WinXP 29 of 33 05:48:41 05:48:41 1 none ASM:Graph
Armadillo| 47% lines=82 trace

196b916474
[Firefox: 2 hits: 06-18 to 06-21] none[4] Win2K-f 31 of 32 00:43:02 00:43:02 1 none none:none
tElock| none trace

0c1c51204b
NEW
3d293743d8
NEW 0c1c51204b [1]
none [4] Win2K-f 32 of 33 05:30:41 05:30:41 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

3175bcfdb3
NEW none[4] WinXP 33 of 33 12:21:27 12:21:27 1 none none:none
PolyEnE| none trace

cce9566ceb
[Firefox: 9 hits: 06-12 to 06-21] none[4] WinXP 31 of 32 07:14:24 07:14:24 1 none none:none
PolyEnE| none trace

18f75b34a5
[Firefox: 2 hits: 06-18 to 06-20] none[4] Win2K-f 30 of 33 05:55:19 05:55:19 1 none none:none
PolyEnE| none trace

4c3df24b32
[Firefox:16 hits: 06-17 to 06-21] 4c3df24b32 [1] WinXP
Win2K-f 0 of 33 02:42:34 20:27:22 4 none ASM:Graph
Armadillo| 47% lines=81 trace

7fdfe363d5
[Firefox:2679 hits: 12-31 to 06-21] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 04:47:41 12:06:04 4 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

741e3b03b3
[Firefox:52 hits: 09-28 to 06-21] e0197e8a64 [0] WinXP 31 of 32 03:37:50 22:47:28 2 none ASM:Graph
none|none 100% lines=62 trace

8390780c27
[Firefox: 3 hits: 06-18 to 06-21]
af88ae89f8
[Firefox: 2 hits: 06-18 to 06-20] none[4]
af88ae89f8[1] Win2K-f 31 of 33 13:45:35 13:45:35 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

831f4ee0a7
[Firefox:653 hits: 07-11 to 06-21] eb7546c600 [0] WinXP 29 of 29 15:13:14 20:23:44 3 none ASM:Graph
none|none 100% lines=61 trace

5f78ff609d
[Firefox:1522 hits: 04-27 to 06-18] d4a06bdc3a [0] Win2K-f
WinXP 21 of 32 03:04:45 23:15:08 2 none ASM:Graph
none|none 46% lines=4 trace

3f0a5b2ebe
[Firefox: 3 hits: 06-18 to 06-20] none[4] WinXP
Win2K-f 32 of 33 03:22:39 20:10:27 2 none none:none
PolyEnE| none trace

d31c3e91b4
NEW none[4] WinXP 30 of 33 15:24:00 15:24:00 1 none none:none
ASPack| none trace

4ab5b0788c
[Firefox:12 hits: 04-21 to 06-21] 272da55ef8 [0] WinXP 29 of 31 07:00:48 07:00:48 1 none ASM:Graph
PolyEnE| 100% lines=114 trace

17028f1eda
[Firefox:11 hits: 09-29 to 06-21] none[3] WinXP 31 of 32 18:45:30 18:48:17 2 none none:none
tElock| none trace

dc8e1c63cd
[Firefox:105 hits: 12-27 to 06-18] e0eb8646ee [0] Win2K-f 22 of 32 23:29:11 23:29:11 1 none ASM:Graph
none|none 62% lines=601
embedded dns trace

230cf1bf53
NEW none[4] Win2K-f 31 of 32 17:08:23 17:08:23 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
57ce4acac2
[Firefox:17 hits: 06-17 to 06-21] none[4]
57ce4acac2[1] Win2K-f 0 of 33 12:16:05 21:30:33 6 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

7c58921d41
NEW none[4] WinXP 31 of 33 04:26:28 04:26:28 1 none none:none
tElock| none trace

8bce56637a
[Firefox: 2 hits: 12-07 to 06-18] none[4] WinXP 23 of 32 03:56:50 03:56:50 1 none none:none
PolyEnE| none trace

1a2c0e6130
[Firefox:433 hits: 12-31 to 06-21] 048df78048 [0] WinXP 29 of 29 13:18:44 21:50:15 6 none ASM:Graph
none|none 100% lines=61 trace

4ca3056804
NEW 4ca3056804 [1] WinXP 1 of 33 19:02:39 19:02:39 1 none ASM:Graph
Armadillo| 47% lines=81 trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
a08f3b74a4
[Firefox:41 hits: 06-18 to 06-21] none[4]
a08f3b74a4[1] WinXP
Win2K-f 0 of 33 06:10:45 23:27:52 15 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

05ea62612c
[Firefox: 3 hits: 06-18 to 06-21] none[4] Win2K-f 31 of 33 19:48:26 19:48:26 1 none none:none
tElock| none trace

a3f358bd55
[Firefox: 6 hits: 08-25 to 06-19] none[4] WinXP 32 of 32 10:12:59 13:42:04 2 none none:none
PolyEnE| none trace

24acffe86e
NEW 24acffe86e [1] WinXP 29 of 33 19:16:41 19:16:41 1 none ASM:Graph
Armadillo| 48% lines=82 trace

133401d618
[Firefox: 2 hits: 06-18 to 06-21] none[4] Win2K-f 31 of 33 00:51:39 00:51:39 1 none none:none
tElock| none trace

dfbaaf577c
NEW none[4] Win2K-f 31 of 33 10:08:00 10:08:00 1 none none:none
tElock| none trace

0c1c51204b
NEW 0c1c51204b [1] Win2K-f 29 of 33 05:30:41 05:30:41 1 none ASM:Graph
Armadillo| 48% lines=82 trace

1e5df7ba74
[Firefox:24 hits: 03-24 to 06-18] a5331b711f [0] WinXP 31 of 32 13:56:28 13:56:28 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

196b916474
[Firefox: 2 hits: 06-18 to 06-21]
d0ad254fd0
[Firefox: 2 hits: 06-18 to 06-21] none[4]
d0ad254fd0[1] Win2K-f 29 of 33 00:43:02 00:43:02 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

f43bfbc3bd
NEW none[4] WinXP 31 of 33 03:33:00 03:33:00 1 none none:none
PolyEnE| none trace

16874933ea
[Firefox: 6 hits: 06-18 to 06-21]
76ee340669
[Firefox: 6 hits: 06-18 to 06-21] 16874933ea [1]
none [4] Win2K-f 33 of 33 07:33:53 08:16:50 2 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

07fa3e2807
NEW
27607f00d2
NEW 07fa3e2807 [1]
none [4] WinXP 31 of 33 15:48:15 15:48:15 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

a99f17e623
[Firefox:22 hits: 03-28 to 06-18] 87dfec58db [0] WinXP 31 of 32 23:21:08 23:21:08 1 none ASM:Graph
PolyEnE| 99% lines=69 trace

6ec2a8994b
NEW none[4] WinXP 30 of 33 21:57:25 21:57:25 1 none none:none
tElock| none trace

df17a625ee
[Firefox:470 hits: 05-04 to 06-21] 9bbdd086c5 [0] WinXP 29 of 29 13:54:40 19:51:58 2 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

986b59708d
[Firefox:300 hits: 05-03 to 06-18] 8a00217866 [0] WinXP 29 of 29 09:51:38 09:54:09 2 none ASM:Graph
PolyEnE| 100% lines=57 trace

851db880e7
NEW 851db880e7 [1] WinXP 23 of 33 20:11:58 20:11:58 1 none ASM:Graph
Armadillo| 47% lines=81 trace

7c58921d41
NEW
d51a5e4f60
NEW none[4]
d51a5e4f60[1] WinXP 30 of 33 04:26:28 04:26:28 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

851db880e7
NEW
f15bd2d1cf
NEW 851db880e7 [1]
none [4] WinXP 32 of 33 20:11:58 20:11:58 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=81
none trace
trace

16874933ea
[Firefox: 6 hits: 06-18 to 06-21] 16874933ea [1] Win2K-f 29 of 33 07:33:53 08:16:50 2 none ASM:Graph
Armadillo| 48% lines=82 trace

bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18]
e53a9ea82e
[Firefox: 2 hits: 06-18 to 06-18] none[4]
e53a9ea82e[1] Win2K-f 23 of 33 12:12:33 12:16:07 2 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

91d75fc99e
NEW none[4] WinXP 32 of 33 04:55:30 04:55:30 1 none none:none
PolyEnE| none trace

230cf1bf53
NEW
b5ec5822e0
NEW none[4]
none [4] Win2K-f 30 of 33 17:08:23 17:08:23 1 none none:none
none:none
PolyEnE|
tElock| none
none trace
trace

5913ead1a1
NEW 5913ead1a1 [1] Win2K-f 29 of 33 18:52:18 18:52:18 1 none ASM:Graph
Armadillo| 48% lines=82 trace

02cab5983b
NEW
76e6f343c5
NEW none[4]
76e6f343c5[1] Win2K-f 30 of 33 19:40:36 19:40:36 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

3690b64ca2
[Firefox: 2 hits: 06-18 to 06-21] none[4] Win2K-f 32 of 33 02:19:37 02:19:37 1 none none:none
PolyEnE| none trace

7f60162c2c
[Firefox:1343 hits: 12-31 to 06-21] 1aad8e4632 [0] WinXP 25 of 25 13:05:34 13:05:34 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

042774a2b7
[Firefox:143 hits: 05-01 to 06-21] 1c9a472cd7 [0] WinXP 29 of 29 13:16:41 13:16:41 1 none ASM:Graph
PolyEnE| 0% lines=71
embedded dns trace

ef846e4a0a
[Firefox: 2 hits: 06-18 to 06-18] none[4] WinXP 32 of 33 01:17:19 01:18:17 2 none none:none
PolyEnE| none trace

b74e792974
NEW b74e792974 [1] WinXP 31 of 33 21:01:17 21:01:17 1 none ASM:Graph
Armadillo| 47% lines=82 trace

3690b64ca2
[Firefox: 2 hits: 06-18 to 06-21]
a6fb77fd26
[Firefox: 2 hits: 06-18 to 06-21] none[4]
a6fb77fd26[1] Win2K-f 30 of 33 02:19:37 02:19:37 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=82 trace
trace

23972eade5
NEW 23972eade5 [1] Win2K-f 29 of 33 13:32:18 13:32:18 1 none ASM:Graph
Armadillo| 47% lines=82 trace

3ae357d17b
[Firefox:719 hits: 05-01 to 06-21] 462a7be171 [0] WinXP 29 of 29 19:03:50 21:09:10 2 none ASM:Graph
PolyEnE| 99% lines=73 trace

b9cdf4ca69
NEW none[4] WinXP 31 of 33 00:10:07 00:10:07 1 none none:none
none|none none trace

7d99b0e910
[Firefox:3077 hits: 12-31 to 06-21] 7a70e1b592 [0] WinXP 26 of 28 01:26:57 22:40:21 9 none ASM:Graph
PolyEnE| 99% lines=68 trace

73ce2b74da
NEW
79c01ec060
[Firefox: 2 hits: 06-18 to 06-19] 73ce2b74da [1]
none [4] Win2K-f 33 of 33 00:30:07 00:30:07 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

ad8c469d62
[Firefox: 2 hits: 06-12 to 06-18] ad8c469d62 [1] Win2K-f 27 of 32 13:16:44 13:16:44 1 none ASM:Graph
StarForce| 34% lines=2 trace

133401d618
[Firefox: 2 hits: 06-18 to 06-21]
847d491ed3
NEW none[4]
847d491ed3[1] Win2K-f 28 of 32 00:51:39 00:51:39 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

b74e792974
NEW
f0e73c39a8
NEW b74e792974 [1]
none [4] WinXP 31 of 33 21:01:17 21:01:17 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

2e04b06527
NEW none[4] Win2K-f 30 of 33 22:42:16 22:42:16 1 none none:none
tElock| none trace

1af57e7e9d
NEW
6091c0e079
NEW 1af57e7e9d [1]
none [4] WinXP 31 of 33 05:48:41 05:48:41 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace