Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

19 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

79a515c871
NEW none[4] Win2K-f 0 of 0 15:58:04 15:58:04 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20]
73f1082158
[Firefox:34 hits: 06-18 to 06-20] none[4]
73f1082158[1] WinXP
Win2K-f 0 of 32 00:58:49 18:04:07 13 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

00fbad48e5
NEW
6ab3a543a7
NEW none[4]
6ab3a543a7[1] WinXP 0 of 0 14:23:20 14:23:20 1 none none:none
ASM:Graph
tElock|
Armadillo| 48% none
lines=83 trace
trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20] none[4] Win2K-f
WinXP 33 of 33 00:38:41 20:50:33 30 none none:none
tElock| none trace

00fbad48e5
NEW none[4] WinXP 0 of 0 14:23:20 14:23:20 1 none none:none
tElock| none trace

1b0477aedf
NEW
a10eda3c29
NEW 1b0477aedf [1]
none [4] WinXP 0 of 0 23:18:54 23:18:54 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=81
none trace
trace

168aab35a3
[Firefox: 5 hits: 06-17 to 06-20] none[4] WinXP 31 of 33 22:02:41 22:02:41 1 none none:none
tElock| none trace

d42c1cc7c0
[Firefox:298 hits: 05-01 to 06-20] af9ca5bed1 [0] WinXP 29 of 29 11:39:42 12:39:47 2 none ASM:Graph
PolyEnE| 100% lines=54 trace

a12cab51ef
[Firefox:1061 hits: 05-01 to 06-20] 40f7f463c4 [0] WinXP 29 of 29 12:29:52 14:45:58 2 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

04538c6f42
NEW 04538c6f42 [1] WinXP 0 of 0 08:02:15 08:02:15 1 none ASM:Graph
FASM| 47% lines=81 trace

f502585714
[Firefox:87 hits: 05-03 to 06-19] ae590430c5 [0] WinXP 29 of 29 18:29:31 18:29:31 1 none ASM:Graph
PolyEnE| 100% lines=63 trace

2aa59ba425
[Firefox:43 hits: 06-30 to 06-19] 2aa59ba425 [1] WinXP 28 of 30 00:06:21 00:06:21 1 none ASM:Graph
ASPack| lines=10 trace

03f912899b
[Firefox:16 hits: 12-14 to 06-20] 83893bd25d [0] WinXP 32 of 32 09:32:57 10:41:01 2 none ASM:Graph
none|none 100% lines=65 trace

cce9566ceb
[Firefox: 6 hits: 06-12 to 06-19] none[4] WinXP 31 of 32 07:56:27 08:25:32 2 none none:none
PolyEnE| none trace

4c3df24b32
[Firefox:10 hits: 06-17 to 06-20] 4c3df24b32 [1] Win2K-f
WinXP 0 of 33 00:38:41 20:37:12 3 none ASM:Graph
Armadillo| 47% lines=81 trace

7fdfe363d5
[Firefox:2667 hits: 12-31 to 06-20] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 01:23:09 22:44:04 7 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

3ed16ae12d
NEW 3ed16ae12d [1] WinXP 0 of 0 04:13:11 04:13:11 1 none ASM:Graph
Armadillo| 47% lines=81 trace

6ae020a074
NEW none[4] Win2K-f 0 of 0 11:48:55 11:48:55 1 none none:none
FSG| none trace

741e3b03b3
[Firefox:44 hits: 09-28 to 06-20] e0197e8a64 [0] WinXP 31 of 32 00:05:06 16:35:47 3 none ASM:Graph
none|none 100% lines=62 trace

79a515c871
NEW
b71c74380c
NEW none[4]
none [4] Win2K-f 0 of 0 15:58:04 15:58:04 1 none none:none
none:none
PolyEnE|
PolyEnE| none
none trace
trace

831f4ee0a7
[Firefox:651 hits: 07-11 to 06-20] eb7546c600 [0] WinXP 29 of 29 04:27:06 04:27:06 1 none ASM:Graph
none|none 100% lines=61 trace

2b41be5e59
NEW none[4] Win2K-f 0 of 0 05:37:14 05:37:14 1 none none:none
tElock| none trace

2110c8100f
NEW
89366f61bb
NEW none[4]
89366f61bb[1] Win2K-f 0 of 0 00:55:35 00:55:35 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

4ab5b0788c
[Firefox: 9 hits: 04-21 to 06-19] 272da55ef8 [0] WinXP 29 of 31 07:34:36 07:34:36 1 none ASM:Graph
PolyEnE| 100% lines=114 trace

5c7aead574
NEW none[4] Win2K-f 0 of 0 07:18:58 07:18:58 1 none none:none
FSG| none trace

168aab35a3
[Firefox: 5 hits: 06-17 to 06-20]
acd2a6266d
NEW none[4]
acd2a6266d[1] WinXP 0 of 0 22:02:41 22:02:41 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

17028f1eda
[Firefox:10 hits: 09-29 to 06-20] none[3] WinXP 31 of 32 05:48:23 05:48:23 1 none none:none
tElock| none trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20]
57ce4acac2
[Firefox:16 hits: 06-17 to 06-20] none[4]
57ce4acac2[1] Win2K-f
WinXP 0 of 33 04:30:05 16:54:58 5 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

ae43bb721a
NEW ae43bb721a [1] Win2K-f 0 of 0 15:52:37 15:52:37 1 none ASM:Graph
Armadillo| 47% lines=81 trace

398530ed93
[Firefox: 2 hits: 06-19 to 06-20] none[4] WinXP 0 of 0 09:36:26 09:36:26 1 none none:none
PolyEnE| none trace

c8f6429e83
NEW none[4] Win2K-f 0 of 0 02:18:05 02:18:05 1 none none:none
FSG| none trace

1a2c0e6130
[Firefox:429 hits: 12-31 to 06-20] 048df78048 [0] WinXP 29 of 29 04:42:03 18:07:19 5 none ASM:Graph
none|none 100% lines=61 trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20]
a08f3b74a4
[Firefox:34 hits: 06-18 to 06-20] none[4]
a08f3b74a4[1] WinXP
Win2K-f 0 of 33 01:05:46 20:50:33 9 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

12df83cb4f
NEW 12df83cb4f [1] WinXP 0 of 0 05:41:35 05:41:35 1 none ASM:Graph
Armadillo| 47% lines=82 trace

12df83cb4f
NEW
2e7dc3f066
NEW 12df83cb4f [1]
none [4] WinXP 0 of 0 05:41:35 05:41:35 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

a3f358bd55
[Firefox: 6 hits: 08-25 to 06-19] none[4] WinXP 32 of 32 00:59:20 00:59:20 1 none none:none
PolyEnE| none trace

04538c6f42
NEW
d280e1c3a0
NEW 04538c6f42 [1]
none [4] WinXP 0 of 0 08:02:15 08:02:15 1 none ASM:Graph
none:none
FASM|
tElock| lines=81
none trace
trace

f2ccea3f12
NEW none[3] WinXP 0 of 0 18:24:46 18:24:46 1 none none:none
tElock| none trace

a4eb225807
NEW
f85f8eb994
NEW none[4]
f85f8eb994[1] WinXP 0 of 0 07:02:54 07:02:54 1 none none:none
ASM:Graph
tElock|
Armadillo| 48% none
lines=82 trace
trace

07d98cfb7c
NEW none[4] WinXP 0 of 0 08:48:36 08:48:36 1 none none:none
PolyEnE| none trace

e592406be2
[Firefox: 2 hits: 06-19 to 06-19] e592406be2 [1] Win2K-f
WinXP 0 of 0 05:16:36 11:40:34 2 none ASM:Graph
Armadillo| 47% lines=82 trace

e592406be2
[Firefox: 2 hits: 06-19 to 06-19]
f1218dd4e7
[Firefox: 2 hits: 06-19 to 06-19] e592406be2 [1]
none [4] Win2K-f
WinXP 0 of 0 05:16:36 11:40:34 2 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

16874933ea
[Firefox: 4 hits: 06-18 to 06-20]
76ee340669
[Firefox: 4 hits: 06-18 to 06-20] 16874933ea [1]
none [4] Win2K-f 33 of 33 08:45:23 08:45:23 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

098258b3a9
NEW none[4] WinXP 0 of 0 21:24:29 21:24:29 1 none none:none
FSG| none trace

07fabc79ef
NEW 07fabc79ef [1] Win2K-f 0 of 0 10:05:39 10:05:39 1 none ASM:Graph
Armadillo| 47% lines=81 trace

df17a625ee
[Firefox:469 hits: 05-04 to 06-19] 9bbdd086c5 [0] WinXP 29 of 29 09:52:47 09:52:47 1 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

a4eb225807
NEW none[4] WinXP 0 of 0 07:02:54 07:02:54 1 none none:none
tElock| none trace

c05385e600
[Firefox:19 hits: 06-24 to 06-19] 6a383b021d [0] WinXP 29 of 29 00:53:16 00:53:16 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

2110c8100f
NEW none[4] Win2K-f 0 of 0 00:55:35 00:55:35 1 none none:none
PolyEnE| none trace

48f8b1a711
NEW none[4] Win2K-f 0 of 0 14:24:31 14:24:31 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20]
dc92683d9a
[Firefox: 2 hits: 06-19 to 06-20] none[4]
dc92683d9a[1] Win2K-f 0 of 0 17:34:47 17:34:47 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

16874933ea
[Firefox: 4 hits: 06-18 to 06-20] 16874933ea [1] Win2K-f 29 of 33 08:45:23 08:45:23 1 none ASM:Graph
Armadillo| 48% lines=82 trace

53bfe15e91
[Firefox:105 hits: 06-17 to 06-20]
a08f3b74a4
[Firefox:34 hits: 06-18 to 06-20]
e07c29c4ae
[Firefox:12 hits: 06-19 to 06-20] none[4]
a08f3b74a4[1]
e07c29c4ae[1] WinXP 0 of 0 20:37:12 20:50:33 2 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

fe22b8315f
NEW none[4] Win2K-f 0 of 0 11:02:08 11:02:08 1 none none:none
StarForce| none trace

21e5edb96d
[Firefox: 2 hits: 06-19 to 06-20] none[4] WinXP 0 of 0 10:21:01 10:21:01 1 none none:none
none|none none trace

3cd7958258
[Firefox: 2 hits: 06-17 to 06-19] none[4] Win2K-f 30 of 33 14:33:03 14:33:03 1 none none:none
tElock| none trace

7f60162c2c
[Firefox:1340 hits: 12-31 to 06-19] 1aad8e4632 [0] WinXP 25 of 25 08:06:04 12:21:45 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

f41d65b459
[Firefox:78 hits: 08-28 to 06-19] none[3] WinXP 32 of 32 00:20:14 00:21:20 2 none none:none
PolyEnE| none trace

3cd7958258
[Firefox: 2 hits: 06-17 to 06-19]
41efedf70f
NEW none[4]
41efedf70f[1] Win2K-f 0 of 0 14:33:03 14:33:03 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

fca1ec9a98
NEW none[4] WinXP 0 of 0 04:49:02 04:49:02 1 none none:none
PolyEnE| none trace

48f8b1a711
NEW
aecf2a5fc9
NEW none[4]
aecf2a5fc9[1] Win2K-f 0 of 0 14:24:31 14:24:31 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

f10855e3e1
NEW
f7f799f818
NEW f10855e3e1 [1]
none [4] Win2K-f 0 of 0 14:56:50 14:56:50 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

4f8fc4407f
[Firefox: 2 hits: 08-13 to 06-19] none[4] WinXP 22 of 32 08:57:36 08:57:36 1 none none:none
ASPack| none trace

7d99b0e910
[Firefox:3071 hits: 12-31 to 06-20] 7a70e1b592 [0] WinXP 26 of 28 06:16:58 06:30:28 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

3ed16ae12d
NEW
79c01ec060
[Firefox: 2 hits: 06-18 to 06-19] 3ed16ae12d [1]
none [4] WinXP 33 of 33 04:13:11 04:13:11 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

3e209ce796
NEW none[4] WinXP 0 of 0 07:41:14 07:41:14 1 none none:none
none|none none trace

1b0477aedf
NEW 1b0477aedf [1] WinXP 0 of 0 23:18:54 23:18:54 1 none ASM:Graph
Armadillo| 47% lines=81 trace

2b41be5e59
NEW
d1599ce1f5
NEW none[4]
d1599ce1f5[1] Win2K-f 0 of 0 05:37:14 05:37:14 1 none none:none
ASM:Graph
tElock|
Armadillo| 48% none
lines=82 trace
trace

ae43bb721a
NEW
b5a9a8f575
NEW ae43bb721a [1]
none [4] Win2K-f 0 of 0 15:52:37 15:52:37 1 none ASM:Graph
none:none
Armadillo|
StarForce| lines=81
none trace
trace

d23978004f
[Firefox: 3 hits: 06-12 to 06-19] none[4] WinXP 30 of 32 11:09:17 11:10:07 2 none none:none
PolyEnE| none trace

2595d6e010
NEW none[4] WinXP 0 of 0 07:33:46 07:33:46 1 none none:none
none|none none trace

f10855e3e1
NEW f10855e3e1 [1] Win2K-f 0 of 0 14:56:50 14:56:50 1 none ASM:Graph
Armadillo| 47% lines=82 trace