Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



25 June 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
f8b6ff6315
NEW
none[none] Win2K-f 30 of 33 03:57:05 03:57:05 1 none none:none
none|none none none
e4adeadeca
NEW
none[none] Win2K-f 31 of 33 05:27:04 05:27:04 1 none none:none
none|none none none
a0a7e837cb
[Firefox:717 hits: 05-01 to 08-13]
none[none] Win2K-f 25 of 29 20:05:03 20:05:03 1 none none:none
none|none none none
1b0d163f3a
NEW
none[none] WinXP 31 of 33 12:13:05 12:13:05 1 none none:none
none|none none none
433aee3773
NEW
none[none] Win2K-f 31 of 33 09:53:44 09:53:44 1 none none:none
none|none none none
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
73f1082158
[Firefox:64 hits: 06-18 to 06-24]
none[4]
73f1082158[1]
Win2K-f
WinXP
0 of 32 04:44:14 23:04:04 18 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
25bfadc04c
NEW
none[none] Win2K-f 30 of 33 10:35:33 10:35:33 1 none none:none
none|none none none
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
none[4] Win2K-f
WinXP
33 of 33 04:44:14 23:37:16 30 none none:none
tElock| none trace
cc8420f883
NEW
none[none] Win2K-f 29 of 33 05:32:14 05:32:14 1 none none:none
none|none none none
2c85520f75
NEW
none[none] Win2K-f 31 of 33 08:23:08 08:23:08 1 none none:none
none|none none none
b280e8e632
NEW
none[none] WinXP 32 of 33 22:04:26 22:04:26 1 none none:none
none|none none none
ef0ba4f2d6
NEW
none[none] WinXP 29 of 33 13:51:22 13:51:22 1 none none:none
none|none none none
0a44ba387c
NEW
6f88847c49
NEW
none[none]
none [none]
WinXP 29 of 33 12:54:07 12:54:07 1 none none:none
none:none
none|none
none|none
none
none
none
none
3f5ec58a6b
[Firefox:29 hits: 04-24 to 06-17]
4a77430a59 [0] WinXP 30 of 32 03:42:22 03:42:22 1 none ASM:Graph
PolyEnE| 99% lines=70 trace
0b7a05f783
[Firefox: 2 hits: 05-14 to 05-15]
none[4] WinXP 27 of 32 12:30:22 12:30:22 1 none none:none
none|none none trace
2c85520f75
NEW
c61d687649
NEW
none[none]
none [none]
Win2K-f 29 of 33 08:23:08 08:23:08 1 none none:none
none:none
none|none
none|none
none
none
none
none
9755a5d861
[Firefox: 2 hits: 06-21 to 06-22]
9755a5d861 [1] Win2K-f 29 of 33 03:38:15 03:38:15 1 none ASM:Graph
Armadillo| 47% lines=81 trace
46f015a232
NEW
none[none] WinXP 30 of 33 04:12:43 04:12:43 1 none none:none
none|none none none
bca9e0fb5f
[Firefox: 4 hits: 06-18 to 06-23]
none[4] Win2K-f 31 of 32 12:51:37 23:26:10 2 none none:none
PolyEnE| none trace
d42c1cc7c0
[Firefox:303 hits: 05-01 to 06-24]
af9ca5bed1 [0] WinXP 29 of 29 02:18:57 12:08:05 2 none ASM:Graph
PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1065 hits: 05-01 to 06-23]
40f7f463c4 [0] WinXP 29 of 29 17:14:43 17:14:43 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
46b789efb3
NEW
c3ba19649a
NEW
none[none]
none [none]
WinXP 0 of 33 03:00:58 03:00:58 1 none none:none
none:none
none|none
none|none
none
none
none
none
f502585714
[Firefox:87 hits: 05-03 to 06-19]
ae590430c5 [0] WinXP 29 of 29 00:41:24 00:41:24 1 none ASM:Graph
PolyEnE| 100% lines=63 trace
4f51b7cd6f
NEW
none[none] Win2K-f 24 of 32 22:20:48 22:20:48 1 none none:none
none|none none none
882688882f
NEW
none[none] WinXP 32 of 33 05:14:04 05:14:04 1 none none:none
none|none none none
cce9566ceb
[Firefox: 9 hits: 06-12 to 06-21]
none[4] WinXP 31 of 32 09:47:59 09:47:59 1 none none:none
PolyEnE| none trace
8aa1b8c599
NEW
none[none] WinXP 30 of 33 04:19:40 04:19:40 1 none none:none
none|none none none
01ef605039
NEW
none[none] WinXP 32 of 33 20:19:17 20:19:17 1 none none:none
none|none none none
5ad4a43e27
NEW
6cfdfc624a
NEW
none[none]
none [none]
Win2K-f 31 of 33 17:55:37 17:55:37 1 none none:none
none:none
none|none
none|none
none
none
none
none
ae0d40ac58
NEW
none[none] WinXP 31 of 33 01:14:55 01:14:55 1 none none:none
none|none none none
0a44ba387c
NEW
none[none] WinXP 32 of 33 12:54:07 12:54:07 1 none none:none
none|none none none
e4adeadeca
NEW
e6a2c2e247
NEW
none[none]
none [none]
Win2K-f 29 of 33 05:27:04 05:27:04 1 none none:none
none:none
none|none
none|none
none
none
none
none
7fdfe363d5
[Firefox:2715 hits: 12-31 to 06-24]
10862ea8b8 [0] Win2K-f
WinXP
25 of 28 00:59:23 22:06:45 8 none ASM:Graph
FSG| 95% lines=1933
embedded dns
trace
639a247ece
[Firefox:34 hits: 04-28 to 06-17]
29d53eec72 [0] Win2K-f 10 of 32 02:54:32 08:45:17 2 none ASM:Graph
StarForce| 77% lines=132 trace
6eddc8716c
NEW
none[4] Win2K-f 31 of 33 06:49:51 06:49:51 1 none none:none
tElock| none trace
780febebd5
NEW
847c5977a3
NEW
none[none]
none [none]
WinXP 31 of 33 20:59:26 20:59:26 1 none none:none
none:none
none|none
none|none
none
none
none
none
48bc07f9ed
NEW
a5308d87d0
NEW
none[4]
a5308d87d0[1]
Win2K-f
WinXP
29 of 33 15:05:46 17:01:24 2 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
6d86a1ff5a
NEW
none[none] WinXP 28 of 33 17:17:35 17:17:35 1 none none:none
none|none none none
741e3b03b3
[Firefox:64 hits: 09-28 to 06-24]
e0197e8a64 [0] WinXP 31 of 32 00:15:39 23:08:56 8 none ASM:Graph
none|none 100% lines=62 trace
a8aa255ece
[Firefox: 3 hits: 05-29 to 06-12]
none[4] WinXP 30 of 32 10:55:40 10:57:29 2 none none:none
PolyEnE| none trace
78206cf024
NEW
none[none] Win2K-f 30 of 33 01:03:51 01:03:51 1 none none:none
none|none none none
96e2caa315
NEW
none[none] Win2K-f 31 of 33 17:48:44 17:48:44 1 none none:none
none|none none none
6d86a1ff5a
NEW
7f6e032fc0
NEW
none[none]
none [none]
WinXP 31 of 33 17:17:35 17:17:35 1 none none:none
none:none
none|none
none|none
none
none
none
none
94d5c64ffc
NEW
none[none] WinXP 31 of 33 13:33:55 13:33:55 1 none none:none
none|none none none
5f78ff609d
[Firefox:1522 hits: 04-27 to 06-18]
d4a06bdc3a [0] WinXP
Win2K-f
21 of 32 00:49:21 22:42:12 10 none ASM:Graph
none|none 46% lines=4 trace
48bc07f9ed
NEW
none[4] WinXP 30 of 33 17:01:24 17:01:24 1 none none:none
PolyEnE| none trace
0f55e617b4
NEW
none[none] Win2K-f 21 of 33 14:29:02 14:29:02 1 none none:none
none|none none none
4ab5b0788c
[Firefox:12 hits: 04-21 to 06-21]
272da55ef8 [0] WinXP 29 of 31 00:23:16 00:23:16 1 none ASM:Graph
PolyEnE| 100% lines=114 trace
17028f1eda
[Firefox:13 hits: 09-29 to 06-23]
none[3] WinXP 31 of 32 15:14:13 15:14:13 1 none none:none
tElock| none trace
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
a08f3b74a4
[Firefox:62 hits: 06-18 to 06-24]
b5919931fe
[Firefox:26 hits: 06-20 to 06-24]
none[4]
a08f3b74a4[1]
b5919931fe[1]
Win2K-f 0 of 32 04:44:14 23:37:16 5 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect|
48% none
lines=81
lines=90
trace
trace
trace
ef641cacaa
NEW
none[none] WinXP 32 of 33 00:32:46 00:32:46 1 none none:none
none|none none none
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
57ce4acac2
[Firefox:20 hits: 06-17 to 06-24]
none[4]
57ce4acac2[1]
Win2K-f 0 of 33 15:14:15 17:57:17 2 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
1a2c0e6130
[Firefox:437 hits: 12-31 to 06-24]
048df78048 [0] WinXP 29 of 29 13:27:33 13:27:33 1 none ASM:Graph
none|none 100% lines=61 trace
04064372aa
NEW
none[none] WinXP 30 of 33 12:23:53 12:23:53 1 none none:none
none|none none none
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
a08f3b74a4
[Firefox:62 hits: 06-18 to 06-24]
none[4]
a08f3b74a4[1]
Win2K-f
WinXP
0 of 33 09:53:58 23:37:16 9 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
ccc06cd8f4
NEW
none[none] WinXP 32 of 33 13:29:38 13:31:00 2 none none:none
none|none none none
4f887ca272
[Firefox:38 hits: 01-26 to 06-17]
4f887ca272 [1] WinXP 0 of 0 01:26:19 01:26:19 1 none ASM:Graph
Stranik| 36% lines=6 trace
4f8d6c0a4d
NEW
none[4] Win2K-f 0 of 0 01:37:56 01:37:56 1 none none:none
none|none none trace
9755a5d861
[Firefox: 2 hits: 06-21 to 06-22]
ccdf14c934
NEW
9755a5d861 [1]
none [none]
Win2K-f 31 of 33 03:38:15 03:38:15 1 none ASM:Graph
none:none
Armadillo|
none|none
lines=81
none
trace
none
898b7181d7
NEW
none[none] WinXP 33 of 33 14:51:38 14:51:38 1 none none:none
none|none none none
780febebd5
NEW
none[none] WinXP 31 of 33 20:59:26 20:59:26 1 none none:none
none|none none none
97e0895e22
NEW
none[4] Win2K-f 27 of 32 11:29:35 11:29:35 1 none none:none
none|none none trace
46b789efb3
NEW
none[none] WinXP 30 of 33 03:00:58 03:00:58 1 none none:none
none|none none none
5ad4a43e27
NEW
none[none] Win2K-f 29 of 33 17:55:37 17:55:37 1 none none:none
none|none none none
e3c59b50f3
NEW
none[none] Win2K-f 32 of 33 09:25:55 09:25:55 1 none none:none
none|none none none
8a75955033
[Firefox: 2 hits: 06-20 to 06-22]
9276c8b36b
[Firefox: 2 hits: 06-20 to 06-22]
none[4]
9276c8b36b[1]
WinXP 28 of 32 03:26:34 03:26:34 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
16874933ea
[Firefox: 6 hits: 06-18 to 06-21]
76ee340669
[Firefox: 6 hits: 06-18 to 06-21]
16874933ea [1]
none [4]
WinXP 33 of 33 06:07:02 07:51:29 2 none ASM:Graph
none:none
Armadillo|
PolyEnE|
lines=82
none
trace
trace
4bc48a5135
NEW
none[none] Win2K-f 30 of 33 04:57:05 04:57:05 1 none none:none
none|none none none
23c32fbd78
[Firefox: 4 hits: 05-03 to 06-23]
none[4] Win2K-f 16 of 31 20:50:47 20:50:47 1 none none:none
PeCompact| none trace
01ef605039
NEW
ab3b3379d1
NEW
none[none]
none [none]
WinXP 24 of 33 20:19:17 20:19:17 1 none none:none
none:none
none|none
none|none
none
none
none
none
b9a28a4b68
[Firefox: 4 hits: 04-28 to 06-11]
none[4] Win2K-f 28 of 31 04:50:41 04:50:41 1 none none:none
TXT2COM| none trace
0548212c69
NEW
none[none] WinXP 26 of 33 19:05:48 19:05:48 1 none none:none
none|none none none
76b4ab852e
[Firefox:58 hits: 04-29 to 06-08]
none[4] Win2K-f 12 of 30 00:18:32 00:18:32 1 none none:none
none|none none trace
bca9e0fb5f
[Firefox: 4 hits: 06-18 to 06-23]
e53a9ea82e
[Firefox: 4 hits: 06-18 to 06-23]
none[4]
e53a9ea82e[1]
Win2K-f 23 of 33 12:51:37 23:26:10 2 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
16874933ea
[Firefox: 6 hits: 06-18 to 06-21]
16874933ea [1] WinXP 29 of 33 06:07:02 07:51:29 2 none ASM:Graph
Armadillo| 48% lines=82 trace
53bfe15e91
[Firefox:172 hits: 06-17 to 06-24]
73f1082158
[Firefox:64 hits: 06-18 to 06-24]
e07c29c4ae
[Firefox:28 hits: 06-19 to 06-24]
none[4]
73f1082158[1]
e07c29c4ae[1]
WinXP 0 of 33 04:54:13 19:58:59 5 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG|
48% none
lines=81
lines=92
trace
trace
trace
9b0c5ed538
[Firefox: 6 hits: 05-02 to 05-22]
none[4] Win2K-f 22 of 31 08:16:37 08:16:37 1 none none:none
none|none none trace
ca47a36342
[Firefox:23 hits: 05-04 to 05-29]
c3a58f69c6 [0] WinXP 26 of 28 08:29:17 08:29:17 1 none ASM:Graph
PolyEnE| 100% lines=89
embedded dns
trace
0f55e617b4
NEW
4c764cd519
NEW
none[none]
none [none]
Win2K-f 31 of 33 14:29:02 14:29:02 1 none none:none
none:none
none|none
none|none
none
none
none
none
740e3bffe0
NEW
none[none] WinXP 24 of 33 00:51:02 00:51:02 1 none none:none
none|none none none
8a75955033
[Firefox: 2 hits: 06-20 to 06-22]
none[4] WinXP 29 of 32 03:26:34 03:26:34 1 none none:none
tElock| none trace
6eddc8716c
NEW
aa6a25b2d8
NEW
none[4]
none [none]
Win2K-f 30 of 33 06:49:51 06:49:51 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
a2a036466a
[Firefox:268 hits: 05-05 to 06-17]
none[4] Win2K-f
WinXP
14 of 32 15:21:04 17:49:25 2 none none:none
none|none none trace
3cd7958258
[Firefox: 3 hits: 06-17 to 06-22]
none[4] Win2K-f 30 of 33 02:30:43 02:30:43 1 none none:none
tElock| none trace
3690b64ca2
[Firefox: 3 hits: 06-18 to 06-24]
none[4] WinXP 32 of 33 12:59:57 12:59:57 1 none none:none
PolyEnE| none trace
53123fadcc
[Firefox:57 hits: 01-26 to 06-11]
none[4] Win2K-f 13 of 32 02:27:23 20:55:54 4 none none:none
none|none none trace
7f60162c2c
[Firefox:1352 hits: 12-31 to 06-24]
1aad8e4632 [0] WinXP 25 of 25 03:23:46 12:40:20 3 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
f2668b51f1
[Firefox:10 hits: 08-10 to 06-24]
none[4] WinXP 31 of 32 04:12:22 04:12:22 1 none none:none
PolyEnE| none trace
7df41a77e6
[Firefox: 2 hits: 06-16 to 06-23]
none[4] WinXP 30 of 33 19:28:00 19:28:00 1 none none:none
PolyEnE| none trace
3690b64ca2
[Firefox: 3 hits: 06-18 to 06-24]
a6fb77fd26
[Firefox: 3 hits: 06-18 to 06-24]
none[4]
a6fb77fd26[1]
WinXP 30 of 33 12:59:57 12:59:57 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=82
trace
trace
3cd7958258
[Firefox: 3 hits: 06-17 to 06-22]
41efedf70f
[Firefox: 2 hits: 06-19 to 06-22]
none[4]
41efedf70f[1]
Win2K-f 28 of 32 02:30:43 02:30:43 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
d3c8b52b45
NEW
none[4] WinXP 31 of 33 01:42:46 06:22:29 3 none none:none
PolyEnE| none trace
3ae357d17b
[Firefox:720 hits: 05-01 to 06-24]
462a7be171 [0] WinXP 29 of 29 08:41:31 10:33:42 2 none ASM:Graph
PolyEnE| 99% lines=73 trace
dc20b6fe59
NEW
dc20b6fe59 [1] Win2K-f 0 of 0 00:56:14 00:56:14 1 none ASM:Graph
Armadillo| 47% lines=81 trace
58ac85300c
NEW
9e9e0add44
NEW
none[none]
none [none]
Win2K-f 16 of 33 19:46:32 19:46:32 1 none none:none
none:none
none|none
none|none
none
none
none
none
dc20b6fe59
NEW
f97070ef2b
NEW
dc20b6fe59 [1]
none [4]
Win2K-f 0 of 0 00:56:14 00:56:14 1 none ASM:Graph
none:none
Armadillo|
PolyEnE|
lines=81
none
trace
trace
7d99b0e910
[Firefox:3089 hits: 12-31 to 06-24]
7a70e1b592 [0] WinXP 26 of 28 07:59:11 16:38:27 6 none ASM:Graph
PolyEnE| 99% lines=68 trace
ae0d40ac58
NEW
fc0aa80688
NEW
none[none]
none [none]
WinXP 29 of 33 01:14:55 01:14:55 1 none none:none
none:none
none|none
none|none
none
none
none
none
2e45ae247e
NEW
none[none] WinXP 0 of 33 14:52:31 14:52:31 1 none none:none
none|none none none
58ac85300c
NEW
none[none] Win2K-f 26 of 33 19:46:32 19:46:32 1 none none:none
none|none none none
a92e3f8fc8
[Firefox:115 hits: 05-03 to 06-09]
dfe02a1e52 [0] WinXP 26 of 28 11:43:27 11:43:27 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
740e3bffe0
NEW
76dc1c23e1
NEW
none[none]
none [none]
WinXP 32 of 33 00:51:02 00:51:02 1 none none:none
none:none
none|none
none|none
none
none
none
none
e5d062be59
[Firefox:10 hits: 12-28 to 06-10]
none[4] Win2K-f
WinXP
11 of 32 01:01:45 08:55:53 3 none none:none
ASPack| none trace
8f367186c3
[Firefox:92 hits: 12-27 to 06-17]
01a06977c4 [0] WinXP 14 of 32 01:04:44 22:43:35 2 none ASM:Graph
TXT2COM| 0% lines=0 trace
fd0bf48a75
[Firefox:14 hits: 04-28 to 06-24]
none[3] WinXP 20 of 32 10:13:24 10:13:24 1 none none:none
ASProtect| none trace