Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



02 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
627731ae2b
NEW
none[none] Win2K-f 31 of 33 22:41:38 22:41:38 1 none none:none
none|none none none
e759d2b517
[Firefox: 3 hits: 06-21 to 06-29]
none[4] Win2K-f 29 of 32 18:45:20 18:45:20 1 none none:none
PolyEnE| none trace
797d57e146
NEW
none[none] Win2K-f 20 of 33 04:44:23 04:44:23 1 none none:none
none|none none none
4f51b7cd6f
NEW
89ae89a9b7
NEW
c5622bb285
[Firefox: 5 hits: 06-23 to 06-27]
ee20b91263
[Firefox: 2 hits: 06-27 to 06-27]
none[none]
none [none]
none [4]
none [none]
Win2K-f 0 of 0 00:44:00 00:44:00 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
trace
none
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
73f1082158
[Firefox:139 hits: 06-18 to 07-01]
none[4]
73f1082158[1]
Win2K-f
WinXP
0 of 32 02:59:42 21:56:05 18 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
none[4] Win2K-f
WinXP
33 of 33 02:59:42 21:56:05 32 none none:none
tElock| none trace
b9b41e58f3
NEW
none[none] Win2K-f 30 of 33 02:57:54 02:57:54 1 none none:none
none|none none none
3f0a5b2ebe
[Firefox: 5 hits: 06-18 to 06-30]
c6bfb5f0f2
[Firefox: 5 hits: 06-18 to 06-30]
none[4]
c6bfb5f0f2[1]
Win2K-f 28 of 32 01:56:57 01:56:57 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
17739a55ad
[Firefox:211 hits: 06-27 to 07-01]
none[none] Win2K-f
WinXP
20 of 33 00:18:52 10:19:04 7 none none:none
none|none none none
a014934a72
[Firefox:55 hits: 06-28 to 07-01]
dfbaaf577c
[Firefox: 3 hits: 06-18 to 07-01]
f504b4af20
[Firefox: 3 hits: 06-18 to 07-01]
none[none]
none [4]
f504b4af20[1]
Win2K-f 29 of 33 07:09:47 07:09:47 1 none none:none
none:none
ASM:Graph
none|none
tElock|
Armadillo|
47% none
none
lines=82
none
trace
trace
4ab2ecbc0f
[Firefox: 2 hits: 06-29 to 06-30]
65eb2e3aee
[Firefox: 2 hits: 06-29 to 06-30]
none[none]
none [none]
WinXP 31 of 33 10:27:49 10:27:49 1 none none:none
none:none
none|none
none|none
none
none
none
none
9e6b5a4c40
NEW
none[none] WinXP 32 of 33 02:12:01 02:12:01 1 none none:none
none|none none none
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
b7082104e4
[Firefox:21 hits: 06-18 to 07-01]
none[4]
none [4]
Win2K-f
WinXP
8 of 33 09:39:25 14:08:50 2 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
80433c452f
[Firefox: 2 hits: 06-30 to 07-01]
none[none] WinXP 32 of 33 00:18:51 02:52:57 2 none none:none
none|none none none
69be040d0b
[Firefox: 2 hits: 06-21 to 06-28]
none[4] WinXP 30 of 33 05:03:38 05:03:38 1 none none:none
tElock| none trace
69be040d0b
[Firefox: 2 hits: 06-21 to 06-28]
81bbbeac34
[Firefox: 2 hits: 06-21 to 06-28]
none[4]
81bbbeac34[1]
WinXP 30 of 33 05:03:38 05:03:38 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
627731ae2b
NEW
9db7aea9c0
NEW
none[none]
none [none]
Win2K-f 29 of 33 22:41:38 22:41:38 1 none none:none
none:none
none|none
none|none
none
none
none
none
168aab35a3
[Firefox:22 hits: 06-17 to 07-01]
none[4] WinXP 31 of 33 05:07:57 06:18:05 2 none none:none
tElock| none trace
4c3df24b32
[Firefox:37 hits: 06-17 to 07-01]
97fef473b9
NEW
4c3df24b32 [1]
none [none]
Win2K-f 33 of 33 13:30:16 13:30:16 1 none ASM:Graph
none:none
Armadillo|
none|none
lines=81
none
trace
none
4347a366c8
NEW
none[none] WinXP 18 of 32 02:56:05 02:56:05 1 none none:none
none|none none none
4f3df56c30
[Firefox: 8 hits: 06-28 to 07-01]
none[none] Win2K-f 10 of 33 02:46:43 07:44:03 2 none none:none
none|none none none
73ce2b74da
[Firefox: 2 hits: 06-18 to 06-26]
73ce2b74da [1] Win2K-f 3 of 33 01:04:44 01:04:44 1 none ASM:Graph
Armadillo| 47% lines=81 trace
a12cab51ef
[Firefox:1089 hits: 05-01 to 07-01]
40f7f463c4 [0] WinXP 29 of 29 04:23:20 20:39:30 5 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
0c1c51204b
NEW
3d293743d8
NEW
0c1c51204b [1]
none [4]
Win2K-f 32 of 33 21:45:32 21:45:32 1 none ASM:Graph
none:none
Armadillo|
PolyEnE|
lines=82
none
trace
trace
adbd470e8b
NEW
none[none] Win2K-f 21 of 33 01:56:31 01:56:31 1 none none:none
none|none none none
4254c3cd8a
NEW
614712de8b
NEW
none[none]
none [none]
Win2K-f 29 of 33 09:10:13 09:10:13 1 none none:none
none:none
none|none
none|none
none
none
none
none
399a88233f
[Firefox: 3 hits: 06-28 to 07-01]
none[none] WinXP 32 of 33 01:56:26 01:56:26 1 none none:none
none|none none none
074325ecbc
NEW
none[none] Win2K-f 24 of 33 00:07:17 18:36:38 2 none none:none
none|none none none
06f27eb5cb
NEW
none[none] WinXP 28 of 33 23:24:47 23:24:47 1 none none:none
none|none none none
03f912899b
[Firefox:25 hits: 12-14 to 06-30]
83893bd25d [0] WinXP 32 of 32 13:02:15 21:57:14 3 none ASM:Graph
none|none 100% lines=65 trace
4f51b7cd6f
NEW
none[none] Win2K-f 24 of 32 00:44:00 00:44:00 1 none none:none
none|none none none
b96c53aded
[Firefox: 4 hits: 06-28 to 06-30]
none[none] Win2K-f 26 of 33 04:16:31 04:16:31 1 none none:none
none|none none none
71b5bbe58a
NEW
none[none] WinXP 31 of 33 01:09:34 01:09:34 1 none none:none
none|none none none
8700fb55fc
NEW
none[none] Win2K-f 29 of 33 08:31:47 08:31:47 1 none none:none
none|none none none
4c3df24b32
[Firefox:37 hits: 06-17 to 07-01]
4c3df24b32 [1] WinXP
Win2K-f
0 of 33 05:07:57 21:03:34 5 none ASM:Graph
Armadillo| 47% lines=81 trace
7fdfe363d5
[Firefox:2785 hits: 12-31 to 07-01]
10862ea8b8 [0] Win2K-f
WinXP
25 of 28 00:20:16 22:47:38 19 none ASM:Graph
FSG| 95% lines=1933
embedded dns
trace
6eddc8716c
[Firefox: 2 hits: 06-17 to 06-25]
none[4] Win2K-f 31 of 33 23:56:42 23:56:42 1 none none:none
tElock| none trace
741e3b03b3
[Firefox:92 hits: 09-28 to 07-01]
e0197e8a64 [0] WinXP 31 of 32 01:06:21 18:19:34 10 none ASM:Graph
none|none 100% lines=62 trace
5871e473d3
NEW
ae2fb9fc7d
NEW
none[none]
none [none]
WinXP 32 of 33 17:30:07 17:30:07 1 none none:none
none:none
none|none
none|none
none
none
none
none
4f8d6c0a4d
[Firefox: 2 hits: 06-23 to 06-25]
6d7d2f0a24
NEW
none[4]
none [none]
Win2K-f 14 of 33 10:31:12 10:31:12 1 none none:none
none:none
none|none
none|none
none
none
trace
none
2949152a24
NEW
none[none] Win2K-f 30 of 32 05:12:10 05:12:10 1 none none:none
none|none none none
a896c13b26
[Firefox: 2 hits: 06-30 to 07-01]
none[none] WinXP 13 of 33 03:50:08 03:50:08 1 none none:none
none|none none none
831f4ee0a7
[Firefox:668 hits: 07-11 to 07-01]
eb7546c600 [0] WinXP 29 of 29 04:51:42 23:43:22 3 none ASM:Graph
none|none 100% lines=61 trace
3f0a5b2ebe
[Firefox: 5 hits: 06-18 to 06-30]
none[4] Win2K-f 32 of 33 01:56:57 01:56:57 1 none none:none
PolyEnE| none trace
2b905ce565
NEW
none[none] WinXP 14 of 33 00:43:44 00:43:44 1 none none:none
none|none none none
59aafd5707
NEW
none[none] Win2K-f 13 of 33 06:58:15 07:14:45 2 none none:none
none|none none none
b36b95f94d
[Firefox: 3 hits: 06-28 to 07-01]
none[none] Win2K-f 11 of 32 03:04:31 03:04:31 1 none none:none
none|none none none
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
73f1082158
[Firefox:139 hits: 06-18 to 07-01]
b5919931fe
[Firefox:47 hits: 06-20 to 07-01]
none[4]
73f1082158[1]
b5919931fe[1]
Win2K-f 0 of 32 14:11:11 21:16:40 2 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect|
48% none
lines=81
lines=90
trace
trace
trace
4ab2ecbc0f
[Firefox: 2 hits: 06-29 to 06-30]
none[none] WinXP 31 of 33 10:27:49 10:27:49 1 none none:none
none|none none none
d2c26e07fd
[Firefox:143 hits: 06-27 to 07-01]
none[none] Win2K-f
WinXP
10 of 33 00:14:07 06:10:43 7 none none:none
none|none none none
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
57ce4acac2
[Firefox:30 hits: 06-17 to 07-01]
none[4]
57ce4acac2[1]
Win2K-f 0 of 33 14:11:11 14:11:11 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
3dffacd270
NEW
d5bf17f14e
NEW
3dffacd270 [1]
none [4]
WinXP 30 of 32 05:03:54 05:03:54 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
2110c8100f
[Firefox: 5 hits: 06-19 to 07-01]
e818015a89
[Firefox: 4 hits: 06-23 to 07-01]
none[4]
e818015a89[1]
WinXP 0 of 0 15:06:49 15:06:49 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
af79e0c602
[Firefox:11 hits: 07-19 to 06-26]
none[4] WinXP 29 of 30 09:12:34 09:12:34 1 none none:none
ASPack| none trace
4ffcf13c83
NEW
none[none] WinXP 0 of 33 04:23:20 04:23:20 1 none none:none
none|none none none
1a2c0e6130
[Firefox:444 hits: 12-31 to 07-01]
048df78048 [0] WinXP 29 of 29 03:11:07 04:28:54 2 none ASM:Graph
none|none 100% lines=61 trace
8700fb55fc
NEW
a014934a72
[Firefox:55 hits: 06-28 to 07-01]
none[none]
none [none]
Win2K-f 27 of 33 06:58:15 08:31:47 3 none none:none
none:none
none|none
none|none
none
none
none
none
53bfe15e91
[Firefox:319 hits: 06-17 to 07-01]
a08f3b74a4
[Firefox:113 hits: 06-18 to 07-01]
none[4]
a08f3b74a4[1]
Win2K-f
WinXP
0 of 33 05:07:34 21:47:14 10 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
4f51b7cd6f
NEW
89ae89a9b7
NEW
c5622bb285
[Firefox: 5 hits: 06-23 to 06-27]
none[none]
none [none]
none [4]
Win2K-f 0 of 0 00:44:00 00:44:00 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
trace
4f8d6c0a4d
[Firefox: 2 hits: 06-23 to 06-25]
none[4] Win2K-f 0 of 0 10:31:12 10:31:12 1 none none:none
none|none none trace
d27ec859b1
NEW
none[none] WinXP 30 of 33 03:10:50 03:10:50 1 none none:none
none|none none none
59aafd5707
NEW
6914740929
NEW
none[none]
6914740929[1]
Win2K-f 30 of 32 06:58:15 06:58:15 1 none none:none
ASM:Graph
none|none
StarForce|
50% none
lines=19
none
trace
87e5da3c72
NEW
none[none] Win2K-f 30 of 33 01:32:22 01:32:22 1 none none:none
none|none none none
a2fa7251fe
NEW
none[none] Win2K-f 32 of 33 07:54:09 07:54:09 1 none none:none
none|none none none
7bf40dbd28
NEW
none[none] Win2K-f 23 of 33 11:43:25 11:43:25 1 none none:none
none|none none none
661a97baa1
NEW
none[none] WinXP
Win2K-f
31 of 33 01:23:04 04:03:06 2 none none:none
none|none none none
a0139d7ad8
[Firefox:448 hits: 05-02 to 07-01]
d9e9662db1 [0] WinXP 29 of 29 10:03:25 10:03:25 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
2f5a49b768
[Firefox: 3 hits: 06-22 to 06-29]
none[4] WinXP 29 of 32 02:03:22 02:03:22 1 none none:none
FSG| none trace
a014934a72
[Firefox:55 hits: 06-28 to 07-01]
dfbaaf577c
[Firefox: 3 hits: 06-18 to 07-01]
none[none]
none [4]
Win2K-f 31 of 33 07:09:47 07:09:47 1 none none:none
none:none
none|none
tElock|
none
none
none
trace
0c1c51204b
NEW
0c1c51204b [1] Win2K-f 29 of 33 21:45:32 21:45:32 1 none ASM:Graph
Armadillo| 48% lines=82 trace
4c3df24b32
[Firefox:37 hits: 06-17 to 07-01]
6a4845ca11
NEW
4c3df24b32 [1]
none [none]
Win2K-f
WinXP
0 of 0 20:57:13 21:03:34 2 none ASM:Graph
none:none
Armadillo|
none|none
lines=81
none
trace
none
536227ab5f
NEW
none[none] Win2K-f 19 of 33 01:00:47 01:00:47 1 none none:none
none|none none none
a99f17e623
[Firefox:22 hits: 03-28 to 06-18]
87dfec58db [0] WinXP 31 of 32 01:57:42 01:57:56 2 none ASM:Graph
PolyEnE| 99% lines=69 trace
cf153403d1
[Firefox: 3 hits: 06-28 to 06-29]
none[none] Win2K-f 23 of 33 02:29:50 02:29:50 1 none none:none
none|none none none
ad062638f8
NEW
none[none] WinXP 33 of 33 12:10:02 12:10:02 1 none none:none
none|none none none
6c36e19037
[Firefox: 6 hits: 06-22 to 06-28]
none[4] WinXP
Win2K-f
27 of 32 08:35:24 10:03:15 2 none none:none
none|none none trace
ca15c09536
[Firefox:170 hits: 06-27 to 07-01]
none[none] Win2K-f
WinXP
26 of 33 00:07:08 04:54:21 11 none none:none
none|none none none
2110c8100f
[Firefox: 5 hits: 06-19 to 07-01]
none[4] WinXP 29 of 32 15:06:49 15:06:49 1 none none:none
PolyEnE| none trace
9a32965bc8
[Firefox:10 hits: 06-28 to 07-01]
none[none] Win2K-f 12 of 33 03:59:25 03:59:25 1 none none:none
none|none none none
a9c8d121f2
[Firefox: 8 hits: 06-28 to 07-01]
none[none] WinXP 28 of 33 01:44:14 01:44:14 1 none none:none
none|none none none
b17ccd664c
[Firefox: 2 hits: 06-30 to 06-30]
none[none] WinXP
Win2K-f
31 of 33 01:38:26 15:48:56 2 none none:none
none|none none none
6887c0c417
[Firefox:11 hits: 08-17 to 06-22]
0a9bea2750 [0] Win2K-f 25 of 29 05:06:20 05:06:20 1 none ASM:Graph
FSG| 93% lines=1932
embedded dns
trace
ce46f7ab87
NEW
none[none] WinXP 1 of 33 18:12:18 18:12:18 1 none none:none
none|none none none
1509c8d024
[Firefox: 4 hits: 06-17 to 06-27]
e07c29c4ae
[Firefox:48 hits: 06-19 to 07-01]
none[4]
e07c29c4ae[1]
WinXP 0 of 33 14:08:50 20:32:25 3 none none:none
ASM:Graph
tElock|
FSG|
48% none
lines=92
trace
trace
2949152a24
NEW
f1a10a0d85
NEW
none[none]
none [none]
Win2K-f 30 of 33 05:12:10 05:12:10 1 none none:none
none:none
none|none
none|none
none
none
none
none
910ee72436
NEW
none[none] WinXP 29 of 33 05:41:50 05:41:50 1 none none:none
none|none none none
6eddc8716c
[Firefox: 2 hits: 06-17 to 06-25]
aa6a25b2d8
NEW
none[4]
none [none]
Win2K-f 30 of 33 23:56:42 23:56:42 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
215dda8137
NEW
c1c5be6c5a
NEW
none[none]
none [none]
Win2K-f 31 of 33 00:41:07 00:41:07 1 none none:none
none:none
none|none
none|none
none
none
none
none
73582ef3de
NEW
none[none] WinXP 32 of 33 00:57:08 00:57:08 1 none none:none
none|none none none
074325ecbc
NEW
2a66fc87fa
NEW
none[none]
none [none]
Win2K-f 32 of 33 00:07:17 18:36:38 2 none none:none
none:none
none|none
none|none
none
none
none
none
7f60162c2c
[Firefox:1378 hits: 12-31 to 07-01]
1aad8e4632 [0] WinXP 25 of 25 14:58:51 14:58:51 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
69de2602f6
NEW
none[none] WinXP 29 of 33 09:21:11 09:21:11 1 none none:none
none|none none none
5871e473d3
NEW
none[none] WinXP 29 of 33 17:30:07 17:30:07 1 none none:none
none|none none none
4f51b7cd6f
NEW
89ae89a9b7
NEW
none[none]
none [none]
Win2K-f 16 of 33 00:44:00 00:44:00 1 none none:none
none:none
none|none
none|none
none
none
none
none
215dda8137
NEW
none[none] Win2K-f 30 of 33 00:41:07 00:41:07 1 none none:none
none|none none none
48529863a4
NEW
none[none] WinXP 31 of 33 01:46:52 01:46:52 1 none none:none
none|none none none
3ae357d17b
[Firefox:728 hits: 05-01 to 07-01]
462a7be171 [0] WinXP 29 of 29 13:01:43 13:01:43 1 none ASM:Graph
PolyEnE| 99% lines=73 trace
ce46f7ab87
NEW
d7dc1e3bea
NEW
none[none]
none [none]
WinXP 32 of 33 18:12:18 18:12:18 1 none none:none
none:none
none|none
none|none
none
none
none
none
9928a1e660
[Firefox:21 hits: 10-06 to 05-15]
28c8dadabf [0] Win2K-f 31 of 32 15:45:40 15:45:40 1 none ASM:Graph
none|none 99% lines=104
embedded dns
trace
73ce2b74da
[Firefox: 2 hits: 06-18 to 06-26]
79c01ec060
[Firefox: 3 hits: 06-18 to 06-26]
73ce2b74da [1]
none [4]
Win2K-f 33 of 33 01:04:44 01:04:44 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
7d99b0e910
[Firefox:3127 hits: 12-31 to 07-01]
7a70e1b592 [0] WinXP 26 of 28 02:31:40 18:45:18 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
06f27eb5cb
NEW
d27dfd506b
NEW
none[none]
none [none]
WinXP 31 of 33 23:24:47 23:24:47 1 none none:none
none:none
none|none
none|none
none
none
none
none
e511b659f8
[Firefox: 5 hits: 06-30 to 07-01]
none[none] Win2K-f 31 of 33 01:33:05 01:33:05 1 none none:none
none|none none none
1509c8d024
[Firefox: 4 hits: 06-17 to 06-27]
e07c29c4ae
[Firefox:48 hits: 06-19 to 07-01]
f23b040440
[Firefox: 2 hits: 06-22 to 06-24]
none[4]
e07c29c4ae[1]
f23b040440[1]
WinXP 30 of 32 20:32:25 20:32:25 1 none none:none
ASM:Graph
ASM:Graph
tElock|
FSG|
Armadillo|
47% none
lines=92
lines=82
trace
trace
trace
2e45ae247e
[Firefox: 2 hits: 06-25 to 06-28]
none[none] WinXP 0 of 33 13:17:45 13:17:45 1 none none:none
none|none none none
1509c8d024
[Firefox: 4 hits: 06-17 to 06-27]
none[4] WinXP 31 of 33 20:32:25 20:32:25 1 none none:none
tElock| none trace
4e8ee871a1
NEW
none[none] WinXP 30 of 33 04:41:53 04:41:53 1 none none:none
none|none none none
db3d848a14
NEW
none[none] Win2K-f 31 of 33 05:32:09 05:32:09 1 none none:none
none|none none none
a2fa7251fe
NEW
fc467ecfec
NEW
none[none]
none [none]
Win2K-f 29 of 33 07:54:09 07:54:09 1 none none:none
none:none
none|none
none|none
none
none
none
none
9b44eb3239
NEW
none[none] WinXP 22 of 33 02:48:51 02:48:51 1 none none:none
none|none none none
619057c44c
NEW
none[none] Win2K-f 31 of 33 00:39:33 00:39:33 1 none none:none
none|none none none
4254c3cd8a
NEW
none[none] Win2K-f 31 of 33 09:10:13 09:10:13 1 none none:none
none|none none none
3dffacd270
NEW
3dffacd270 [1] WinXP 28 of 32 05:03:54 05:03:54 1 none ASM:Graph
Armadillo| 47% lines=82 trace