Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


03 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
4c3df24b32
[Firefox:42 hits: 06-17 to 07-02]
e07c29c4ae
[Firefox:51 hits: 06-19 to 07-02]
ff2150aa95
NEW		 4c3df24b32 [1]
e07c29c4ae[1]
none [none]		 WinXP 30 of 33 08:59:15 08:59:15 1 none ASM:Graph
ASM:Graph
none:none
 Armadillo|
FSG|
none|none		 lines=81
lines=92
none		 trace
trace
none
b1de2f5ce5
NEW		 none[none] WinXP 29 of 33 18:49:40 18:49:40 1 none none:none
 none|none none none
53bfe15e91
[Firefox:351 hits: 06-17 to 07-02]
73f1082158
[Firefox:157 hits: 06-18 to 07-02]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 03:03:59 21:00:39 6 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
fa841b35ff
NEW		 none[none] WinXP 31 of 33 01:53:40 02:00:29 2 none none:none
 none|none none none
dfcd73f7a7
NEW		 none[none] WinXP 30 of 33 05:29:57 16:48:23 2 none none:none
 none|none none none
53bfe15e91
[Firefox:351 hits: 06-17 to 07-02]		 none[4] WinXP
Win2K-f		 33 of 33 00:31:45 21:00:39 15 none none:none
 tElock| none trace
2c114f9f83
NEW		 none[none] WinXP 31 of 33 04:19:17 04:19:17 1 none none:none
 none|none none none
3b2c621477
NEW		 none[none] Win2K-f 8 of 33 20:42:39 20:42:39 1 none none:none
 none|none none none
dfbaaf577c
[Firefox: 4 hits: 06-18 to 07-02]
e07c29c4ae
[Firefox:51 hits: 06-19 to 07-02]
f504b4af20
[Firefox: 4 hits: 06-18 to 07-02]		 none[4]
e07c29c4ae[1]
f504b4af20[1]		 WinXP 29 of 33 05:35:58 05:35:58 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
FSG|
Armadillo|		 47% none
lines=92
lines=82		 trace
trace
trace
53bfe15e91
[Firefox:351 hits: 06-17 to 07-02]
b7082104e4
[Firefox:23 hits: 06-18 to 07-02]		 none[4]
none [4]		 WinXP
Win2K-f		 8 of 33 08:57:27 18:58:53 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5378ab9d2d
NEW		 none[none] Win2K-f 31 of 32 22:46:14 22:46:14 1 none none:none
 none|none none none
52d5117a94
NEW		 none[none] Win2K-f 21 of 33 01:56:14 01:56:14 1 none none:none
 none|none none none
3f5ec58a6b
[Firefox:31 hits: 04-24 to 06-27]		 4a77430a59 [0] WinXP 30 of 32 12:49:32 12:49:32 1 none ASM:Graph
 PolyEnE| 99% lines=70 trace
fce9309509
NEW		 none[none] WinXP 30 of 33 05:13:36 05:13:36 1 none none:none
 none|none none none
168aab35a3
[Firefox:24 hits: 06-17 to 07-02]		 none[4] WinXP
Win2K-f		 31 of 33 07:43:14 23:51:01 3 none none:none
 tElock| none trace
73ce2b74da
[Firefox: 3 hits: 06-18 to 07-02]		 73ce2b74da [1] Win2K-f 3 of 33 23:54:59 23:54:59 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
e8d4d8cde1
[Firefox:293 hits: 03-31 to 06-26]		 fda109a6fd [0] Win2K-f
WinXP		 13 of 31 01:38:45 20:31:01 11 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
a12cab51ef
[Firefox:1094 hits: 05-01 to 07-02]		 40f7f463c4 [0] WinXP 29 of 29 01:10:51 15:52:29 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
743e51a884
NEW		 none[none] WinXP 31 of 31 13:59:02 13:59:02 1 none none:none
 none|none none none
e4d62d3596
NEW		 none[none] WinXP 8 of 33 10:42:50 10:42:50 1 none none:none
 none|none none none
03f912899b
[Firefox:28 hits: 12-14 to 07-02]		 83893bd25d [0] WinXP 32 of 32 01:32:06 01:32:06 1 none ASM:Graph
 none|none 100% lines=65 trace
4c3df24b32
[Firefox:42 hits: 06-17 to 07-02]
dbce870f48
NEW		 4c3df24b32 [1]
none [none]		 Win2K-f 29 of 32 21:55:02 21:55:02 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
53bfe15e91
[Firefox:351 hits: 06-17 to 07-02]
a86bdb31d3
NEW		 none[4]
none [none]		 Win2K-f 29 of 33 14:22:20 14:22:20 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
cce9566ceb
[Firefox:15 hits: 06-12 to 07-01]		 none[4] WinXP 31 of 32 03:59:38 03:59:38 1 none none:none
 PolyEnE| none trace
cfcb945fc1
NEW		 none[none] WinXP 32 of 33 19:59:32 19:59:32 1 none none:none
 none|none none none
7fdfe363d5
[Firefox:2804 hits: 12-31 to 07-02]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 00:26:50 22:39:36 13 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:42 hits: 06-17 to 07-02]		 4c3df24b32 [1] WinXP
Win2K-f		 0 of 33 02:23:50 21:55:02 3 none ASM:Graph
 Armadillo| 47% lines=81 trace
3ed16ae12d
NEW		 3ed16ae12d [1] WinXP 3 of 33 09:36:14 09:36:14 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
741e3b03b3
[Firefox:102 hits: 09-28 to 07-02]		 e0197e8a64 [0] WinXP 31 of 32 11:19:37 14:23:22 2 none ASM:Graph
 none|none 100% lines=62 trace
831f4ee0a7
[Firefox:671 hits: 07-11 to 07-02]		 eb7546c600 [0] WinXP 29 of 29 00:21:20 08:25:13 3 none ASM:Graph
 none|none 100% lines=61 trace
81264c16dd
NEW
9a91743938
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 15:09:51 15:09:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:24 hits: 06-17 to 07-02]
acd2a6266d
[Firefox: 2 hits: 06-19 to 06-21]		 none[4]
acd2a6266d[1]		 WinXP 30 of 33 07:43:14 07:43:14 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
73ce2b74da
[Firefox: 3 hits: 06-18 to 07-02]
79c01ec060
[Firefox: 4 hits: 06-18 to 07-02]
b5919931fe
[Firefox:49 hits: 06-20 to 07-02]		 73ce2b74da [1]
none [4]
b5919931fe[1]		 Win2K-f 0 of 32 03:03:59 23:54:59 4 none ASM:Graph
none:none
ASM:Graph
 Armadillo|
tElock|
ASProtect|		 48% lines=81
none
lines=90		 trace
trace
trace
fce9eba3fb
NEW		 none[none] Win2K-f 30 of 33 21:34:46 21:34:46 1 none none:none
 none|none none none
2905d384e2
NEW		 none[none] WinXP
Win2K-f		 29 of 33 04:58:25 05:07:49 2 none none:none
 none|none none none
53bfe15e91
[Firefox:351 hits: 06-17 to 07-02]
57ce4acac2
[Firefox:31 hits: 06-17 to 07-02]		 none[4]
57ce4acac2[1]		 WinXP 0 of 33 12:43:36 19:06:19 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2ef2f78792
[Firefox: 4 hits: 06-21 to 06-26]
b7a332eb7c
[Firefox: 4 hits: 06-21 to 06-26]		 2ef2f78792 [1]
none [4]		 Win2K-f 30 of 33 20:52:02 20:52:02 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
8c4361f20f
NEW		 none[none] WinXP 32 of 33 10:26:07 10:26:07 1 none none:none
 none|none none none
2c114f9f83
NEW
76595af914
NEW		 none[none]
none [none]		 WinXP 27 of 33 04:19:17 04:19:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1a2c0e6130
[Firefox:446 hits: 12-31 to 07-02]		 048df78048 [0] WinXP 29 of 29 01:04:19 18:24:39 2 none ASM:Graph
 none|none 100% lines=61 trace
a08f3b74a4
[Firefox:123 hits: 06-18 to 07-02]		 a08f3b74a4 [1] WinXP
Win2K-f		 0 of 33 00:31:45 16:03:27 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
bce12aa21f
[Firefox:19 hits: 05-12 to 06-22]		 none[4] WinXP 31 of 33 20:08:44 20:08:44 1 none none:none
 PolyEnE| none trace
89ed97c981
NEW		 none[none] WinXP 30 of 32 17:03:14 17:05:20 2 none none:none
 none|none none none
133401d618
[Firefox: 5 hits: 06-18 to 07-01]		 none[4] WinXP 31 of 33 11:01:14 11:01:14 1 none none:none
 tElock| none trace
00392af02f
NEW
325971e23c
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 31 of 33 03:13:06 17:25:41 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
dfbaaf577c
[Firefox: 4 hits: 06-18 to 07-02]		 none[4] WinXP 31 of 33 05:35:58 05:35:58 1 none none:none
 tElock| none trace
0ce8fd0298
NEW		 none[none] Win2K-f 28 of 33 06:39:32 06:39:32 1 none none:none
 none|none none none
a886d7062a
NEW		 none[none] Win2K-f 30 of 33 07:09:25 07:09:25 1 none none:none
 none|none none none
5dcd26f86a
NEW		 none[none] Win2K-f 30 of 33 06:31:19 06:31:19 1 none none:none
 none|none none none
0ce8fd0298
NEW
9dab37e63b
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 06:39:32 06:39:32 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
607b60ad51
[Firefox: 4 hits: 06-20 to 07-01]
e5c7bce70e
[Firefox: 4 hits: 06-20 to 07-01]		 none[4]
e5c7bce70e[1]		 Win2K-f 2 of 32 12:17:54 12:17:54 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
ad0c5ff63e
NEW		 none[none] WinXP 31 of 33 13:16:04 13:16:04 1 none none:none
 none|none none none
3373948767
NEW
c73f738c30
NEW		 none[none]
none [none]		 WinXP 29 of 33 21:16:06 21:16:06 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a99f17e623
[Firefox:24 hits: 03-28 to 07-02]		 87dfec58db [0] WinXP 31 of 32 05:22:42 05:22:42 1 none ASM:Graph
 PolyEnE| 99% lines=69 trace
8a79fbda68
NEW		 none[none] WinXP 32 of 33 11:38:29 11:38:29 1 none none:none
 none|none none none
19588cb5a9
NEW		 none[none] WinXP 30 of 33 19:27:07 19:27:07 1 none none:none
 none|none none none
d6df3972a0
[Firefox:217 hits: 05-02 to 06-10]		 39eeef52a4 [0] WinXP 29 of 29 09:47:24 09:47:24 1 none ASM:Graph
 PolyEnE| 100% lines=65 trace
00392af02f
NEW		 none[none] Win2K-f
WinXP		 27 of 32 03:13:06 17:25:41 2 none none:none
 none|none none none
99ca2f9ac5
NEW		 none[none] WinXP 28 of 33 13:50:33 13:50:33 1 none none:none
 none|none none none
3373948767
NEW
c73f738c30
NEW
e07c29c4ae
[Firefox:51 hits: 06-19 to 07-02]		 none[none]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 05:35:58 21:16:06 6 none none:none
none:none
ASM:Graph
 none|none
none|none
FSG|		 48% none
none
lines=92		 none
none
trace
161e73cdfc
[Firefox: 3 hits: 05-13 to 06-12]		 none[4] WinXP 29 of 32 23:47:05 23:47:05 1 none none:none
 none|none none trace
80926258e4
NEW		 none[none] WinXP 32 of 33 10:43:02 10:43:02 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1379 hits: 12-31 to 07-02]		 1aad8e4632 [0] WinXP 25 of 25 05:30:20 05:30:20 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
3373948767
NEW		 none[none] WinXP 30 of 33 21:16:06 21:16:06 1 none none:none
 none|none none none
d370fa2826
[Firefox: 4 hits: 04-24 to 05-04]		 d4427d3b1e [0] WinXP 31 of 32 10:35:07 10:35:07 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7d99b0e910
[Firefox:3130 hits: 12-31 to 07-02]		 7a70e1b592 [0] WinXP 26 of 28 03:25:20 19:09:48 5 none ASM:Graph
 PolyEnE| 99% lines=68 trace
73ce2b74da
[Firefox: 3 hits: 06-18 to 07-02]
79c01ec060
[Firefox: 4 hits: 06-18 to 07-02]		 73ce2b74da [1]
none [4]		 WinXP
Win2K-f		 33 of 33 09:36:14 23:54:59 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
1509c8d024
[Firefox: 5 hits: 06-17 to 07-02]
f23b040440
[Firefox: 3 hits: 06-22 to 07-02]		 none[4]
f23b040440[1]		 WinXP 30 of 32 05:07:55 05:07:55 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
168aab35a3
[Firefox:24 hits: 06-17 to 07-02]
f62373a83b
NEW		 none[4]
none [none]		 Win2K-f 30 of 33 18:15:19 18:15:19 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:24 hits: 06-17 to 07-02]
d59714403a
NEW		 none[4]
none [none]		 Win2K-f 30 of 33 23:51:01 23:51:01 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
81264c16dd
NEW		 none[none] Win2K-f 31 of 33 15:09:51 15:09:51 1 none none:none
 none|none none none
133401d618
[Firefox: 5 hits: 06-18 to 07-01]
7819d05bbf
[Firefox: 3 hits: 06-21 to 06-30]		 none[4]
7819d05bbf[1]		 WinXP 29 of 33 11:01:14 11:01:14 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
ab5e47bf8d
[Firefox:55 hits: 05-10 to 06-30]		 none[3] WinXP 29 of 29 07:09:51 07:09:51 1 none none:none
 ASPack| none trace
1509c8d024
[Firefox: 5 hits: 06-17 to 07-02]		 none[4] WinXP 31 of 33 05:07:55 05:07:55 1 none none:none
 tElock| none trace
94d9f89ef5
NEW		 none[none] Win2K-f 33 of 33 19:40:07 19:40:07 1 none none:none
 none|none none none
607b60ad51
[Firefox: 4 hits: 06-20 to 07-01]		 none[4] Win2K-f 31 of 32 12:17:54 12:17:54 1 none none:none
 tElock| none trace
5378ab9d2d
NEW
60a6e7e23c
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 22:46:14 22:46:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2ef2f78792
[Firefox: 4 hits: 06-21 to 06-26]		 2ef2f78792 [1] Win2K-f 29 of 33 20:52:02 20:52:02 1 none ASM:Graph
 Armadillo| 48% lines=82 trace