Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

22 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
73f1082158
[Firefox:43 hits: 06-18 to 06-21] none[4]
73f1082158[1] WinXP
Win2K-f 0 of 32 01:30:39 19:34:09 7 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

3984f311ae
NEW none[4] Win2K-f 30 of 32 20:06:42 20:06:42 1 none none:none
tElock| none trace

f58222344f
[Firefox:13 hits: 12-31 to 06-20] 2a56436a64 [0] WinXP 28 of 31 04:32:07 04:32:07 1 none ASM:Graph
PolyEnE| 54% lines=265
embedded dns trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21] none[4] Win2K-f
WinXP 33 of 33 00:52:02 21:51:02 17 none none:none
tElock| none trace

8a75955033
NEW
9276c8b36b
NEW none[4]
9276c8b36b[1] Win2K-f 28 of 32 05:34:52 05:34:52 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

07fabc79ef
NEW 07fabc79ef [1] Win2K-f 0 of 32 00:52:02 00:52:02 1 none ASM:Graph
Armadillo| 47% lines=81 trace

6c36e19037
NEW none[4] WinXP 27 of 32 05:55:08 05:55:08 1 none none:none
none|none none trace

ed6e30072f
NEW none[4] WinXP 31 of 31 02:33:32 02:33:56 2 none none:none
PolyEnE| none trace

0537139fe7
[Firefox: 2 hits: 06-21 to 06-21] none[4] WinXP 31 of 33 22:19:16 22:19:16 1 none none:none
PolyEnE| none trace

27b945de66
NEW none[4] WinXP 31 of 32 00:45:55 08:01:26 2 none none:none
none|none none trace

7d1b06e856
NEW
df312ddc90
NEW none[4]
df312ddc90[1] WinXP 28 of 32 17:49:24 17:49:24 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
9755a5d861
NEW none[4]
9755a5d861[1] Win2K-f 29 of 33 11:42:46 11:42:46 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

168aab35a3
[Firefox:12 hits: 06-17 to 06-21] none[4] WinXP 31 of 33 05:14:37 05:14:37 1 none none:none
tElock| none trace

bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18]
e53a9ea82e
[Firefox: 2 hits: 06-18 to 06-18] none[4]
e53a9ea82e[1] WinXP 23 of 33 00:49:18 00:49:18 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

6887c0c417
[Firefox:10 hits: 08-17 to 03-20] 0a9bea2750 [0] WinXP 25 of 29 05:16:42 05:16:42 1 none ASM:Graph
FSG| 93% lines=1932
embedded dns trace

475d9a7753
NEW none[4] WinXP 30 of 32 02:07:27 02:07:27 1 none none:none
tElock| none trace

d42c1cc7c0
[Firefox:301 hits: 05-01 to 06-21] af9ca5bed1 [0] WinXP 29 of 29 12:44:13 12:44:13 1 none ASM:Graph
PolyEnE| 100% lines=54 trace

bca9e0fb5f
[Firefox: 2 hits: 06-18 to 06-18] none[4] WinXP 31 of 32 00:49:18 00:49:18 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
73f1082158
[Firefox:43 hits: 06-18 to 06-21]
e07c29c4ae
[Firefox:22 hits: 06-19 to 06-21] none[4]
73f1082158[1]
e07c29c4ae[1] WinXP 0 of 33 03:29:53 17:41:49 2 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

721088fe83
NEW none[4] WinXP 30 of 32 01:15:27 01:15:27 1 none none:none
FSG| none trace

3984f311ae
NEW
bfa18c4273
NEW none[4]
bfa18c4273[1] Win2K-f 29 of 32 20:06:42 20:06:42 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

8a75955033
NEW none[4] Win2K-f 29 of 32 05:34:52 05:34:52 1 none none:none
tElock| none trace

21e5edb96d
[Firefox: 3 hits: 06-19 to 06-21] none[4] WinXP 31 of 33 12:42:09 15:14:50 2 none none:none
none|none none trace

3cd7958258
[Firefox: 2 hits: 06-17 to 06-19] none[4] WinXP 30 of 33 05:25:06 05:25:06 1 none none:none
tElock| none trace

0537139fe7
[Firefox: 2 hits: 06-21 to 06-21]
49b6f2dd5d
[Firefox: 2 hits: 06-21 to 06-21] none[4]
49b6f2dd5d[1] WinXP 29 of 33 22:19:16 22:19:16 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

7fdfe363d5
[Firefox:2679 hits: 12-31 to 06-21] 10862ea8b8 [0] Win2K-f
WinXP 25 of 28 01:49:05 16:49:59 12 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

4c3df24b32
[Firefox:16 hits: 06-17 to 06-21] 4c3df24b32 [1] WinXP 0 of 33 03:32:43 13:19:16 3 none ASM:Graph
Armadillo| 47% lines=81 trace

7f60162c2c
[Firefox:1343 hits: 12-31 to 06-21] 1aad8e4632 [0] WinXP 25 of 25 14:12:03 14:12:03 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

741e3b03b3
[Firefox:52 hits: 09-28 to 06-21] e0197e8a64 [0] WinXP 31 of 32 05:41:34 21:29:18 3 none ASM:Graph
none|none 100% lines=62 trace

3cd7958258
[Firefox: 2 hits: 06-17 to 06-19]
41efedf70f
NEW none[4]
41efedf70f[1] WinXP 28 of 32 05:25:06 05:25:06 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

831f4ee0a7
[Firefox:653 hits: 07-11 to 06-21] eb7546c600 [0] WinXP 29 of 29 01:57:17 05:14:09 2 none ASM:Graph
none|none 100% lines=61 trace

a1a5fa95b9
NEW none[4] WinXP 29 of 32 02:42:58 02:42:58 1 none none:none
tElock| none trace

a1a5fa95b9
NEW
e655846fa1
NEW none[4]
e655846fa1[1] WinXP 28 of 32 02:42:58 02:42:58 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

1898e66cd2
[Firefox: 2 hits: 05-20 to 05-21] none[4] WinXP 31 of 32 08:01:06 08:01:06 1 none none:none
PolyEnE| none trace

17028f1eda
[Firefox:11 hits: 09-29 to 06-21] none[3] WinXP 31 of 32 18:05:27 18:05:27 1 none none:none
tElock| none trace

7d99b0e910
[Firefox:3077 hits: 12-31 to 06-21] 7a70e1b592 [0] WinXP 26 of 28 07:46:15 15:44:13 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
9755a5d861
NEW
b5919931fe
[Firefox:17 hits: 06-20 to 06-21] none[4]
9755a5d861[1]
b5919931fe[1] Win2K-f 0 of 32 01:38:58 11:42:46 3 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

8acd7e1937
NEW 8acd7e1937 [1] Win2K-f 29 of 32 02:44:02 02:44:02 1 none ASM:Graph
none|none 44% lines=0 trace

93385541f3
NEW none[4] WinXP 32 of 32 05:57:36 06:38:01 2 none none:none
none|none none trace

8acd7e1937
NEW
f33628ba56
NEW 8acd7e1937 [1]
f33628ba56[1] Win2K-f 28 of 32 02:44:02 02:44:02 1 none ASM:Graph
ASM:Graph
none|none
ASPack| lines=0
lines=10 trace
trace

7d1b06e856
NEW none[4] WinXP 31 of 32 17:49:24 17:49:24 1 none none:none
PolyEnE| none trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
57ce4acac2
[Firefox:17 hits: 06-17 to 06-21] none[4]
57ce4acac2[1] WinXP 0 of 33 17:24:39 17:24:39 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

2ef2f78792
NEW
b7a332eb7c
NEW 2ef2f78792 [1]
none [4] Win2K-f 30 of 33 03:51:46 08:23:46 2 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

1509c8d024
NEW
f23b040440
NEW none[4]
f23b040440[1] Win2K-f 30 of 32 02:50:30 02:50:30 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

131351dd21
[Firefox: 4 hits: 05-22 to 06-13] none[4] Win2K-f 20 of 32 04:48:45 04:48:45 1 none none:none
none|none none trace

12df83cb4f
NEW 12df83cb4f [1] Win2K-f 28 of 33 01:38:58 01:38:58 1 none ASM:Graph
Armadillo| 47% lines=82 trace

53bfe15e91
[Firefox:123 hits: 06-17 to 06-21]
a08f3b74a4
[Firefox:41 hits: 06-18 to 06-21] none[4]
a08f3b74a4[1] Win2K-f
WinXP 0 of 33 03:23:05 21:51:02 5 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

3e0b734da7
NEW none[4] WinXP 29 of 32 00:16:22 00:16:22 1 none none:none
FSG| none trace

bce12aa21f
[Firefox:18 hits: 05-12 to 06-10] none[4] WinXP 31 of 33 13:10:43 13:10:43 1 none none:none
PolyEnE| none trace

12df83cb4f
NEW
2e7dc3f066
NEW 12df83cb4f [1]
none [4] Win2K-f 30 of 33 01:38:58 01:38:58 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

ab5e47bf8d
[Firefox:49 hits: 05-10 to 06-20] none[3] WinXP 29 of 29 00:32:05 23:38:40 2 none none:none
ASPack| none trace

840e31cc53
NEW none[4] WinXP 32 of 32 03:12:06 03:12:06 1 none none:none
Xtreme-Pr| none trace

1509c8d024
NEW none[4] Win2K-f 31 of 33 02:50:30 02:50:30 1 none none:none
tElock| none trace

2f5a49b768
NEW none[4] WinXP 29 of 32 22:35:08 22:35:08 1 none none:none
FSG| none trace

475d9a7753
NEW
e9a7fa27d5
NEW none[4]
e9a7fa27d5[1] WinXP 30 of 32 02:07:27 02:07:27 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

2ef2f78792
NEW 2ef2f78792 [1] Win2K-f 29 of 33 03:51:46 08:23:46 2 none ASM:Graph
Armadillo| 48% lines=82 trace