Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

05 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

6ec2a8994b
[Firefox: 3 hits: 06-18 to 06-26]
857b781ca9
[Firefox: 3 hits: 06-18 to 06-26] none[4]
857b781ca9[1] Win2K-f 29 of 33 21:32:54 21:32:54 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
73f1082158
[Firefox:174 hits: 06-18 to 07-04] none[4]
73f1082158[1] Win2K-f
WinXP 0 of 32 00:15:42 23:09:09 18 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04] none[4] Win2K-f
WinXP 33 of 33 00:15:42 23:09:09 27 none none:none
tElock| none trace

b402048f34
NEW none[none] WinXP 27 of 33 18:50:16 18:50:16 1 none none:none
none|none none none

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
b7082104e4
[Firefox:26 hits: 06-18 to 07-04] none[4]
none [4] WinXP 8 of 33 17:49:50 17:49:50 1 none none:none
none:none
tElock|
tElock| none
none trace
trace

4c3df24b32
[Firefox:50 hits: 06-17 to 07-04]
8390780c27
[Firefox: 6 hits: 06-18 to 06-29] 4c3df24b32 [1]
none [4] WinXP 30 of 32 02:52:16 02:52:16 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

034e57c5e5
NEW
f44f2f1f15
NEW none[none]
none [none] WinXP 32 of 33 14:39:45 14:39:45 1 none none:none
none:none
none|none
none|none none
none none
none

168aab35a3
[Firefox:35 hits: 06-17 to 07-04] none[4] WinXP
Win2K-f 31 of 33 01:37:31 22:51:35 3 none none:none
tElock| none trace

e8d4d8cde1
[Firefox:304 hits: 03-31 to 07-03] fda109a6fd [0] WinXP 13 of 31 17:01:10 17:18:58 2 none ASM:Graph
ASProtect| 64% lines=583
embedded dns trace

bca9e0fb5f
[Firefox: 7 hits: 06-18 to 06-30] none[4] Win2K-f 31 of 32 18:18:17 18:18:17 1 none none:none
PolyEnE| none trace

a12cab51ef
[Firefox:1096 hits: 05-01 to 07-03] 40f7f463c4 [0] WinXP 29 of 29 13:08:07 18:10:07 3 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

0c1c51204b
[Firefox: 2 hits: 06-18 to 07-02]
3d293743d8
[Firefox: 2 hits: 06-18 to 07-02] 0c1c51204b [1]
none [4] WinXP 32 of 33 07:40:12 07:40:12 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

4c3df24b32
[Firefox:50 hits: 06-17 to 07-04]
dbce870f48
NEW 4c3df24b32 [1]
none [none] Win2K-f 29 of 32 08:25:51 08:25:51 1 none ASM:Graph
none:none
Armadillo|
none|none lines=81
none trace
none

cce9566ceb
[Firefox:18 hits: 06-12 to 07-04] none[4] WinXP 31 of 32 08:11:16 08:11:16 1 none none:none
PolyEnE| none trace

ae4bed1aa9
[Firefox: 3 hits: 06-21 to 07-01]
bc51bd8226
[Firefox: 3 hits: 06-21 to 07-01] ae4bed1aa9 [1]
none [4] Win2K-f 29 of 32 14:18:44 14:18:44 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=81
none trace
trace

01efbb6280
NEW
1e95b76bf3
NEW none[none]
none [none] WinXP 29 of 33 01:33:27 01:33:27 1 none none:none
none:none
none|none
none|none none
none none
none

168aab35a3
[Firefox:35 hits: 06-17 to 07-04]
4c3df24b32
[Firefox:50 hits: 06-17 to 07-04] none[4]
4c3df24b32[1] WinXP
Win2K-f 0 of 33 01:37:31 22:51:35 6 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

7fdfe363d5
[Firefox:2839 hits: 12-31 to 07-04] 10862ea8b8 [0] WinXP
Win2K-f 25 of 28 02:19:24 08:38:59 8 none ASM:Graph
FSG| 95% lines=1933
embedded dns trace

3ed16ae12d
[Firefox: 2 hits: 06-19 to 07-03] 3ed16ae12d [1] WinXP 3 of 33 03:30:25 03:30:25 1 none ASM:Graph
Armadillo| 47% lines=81 trace

6d86a1ff5a
[Firefox: 3 hits: 06-25 to 07-04] none[none] Win2K-f 28 of 33 00:18:07 21:21:17 2 none none:none
none|none none none

741e3b03b3
[Firefox:104 hits: 09-28 to 07-03] e0197e8a64 [0] WinXP 31 of 32 07:02:12 23:21:19 4 none ASM:Graph
none|none 100% lines=62 trace

b7b3903437
NEW none[4] WinXP 30 of 32 23:34:29 23:34:29 1 none none:none
none|none none trace

6d86a1ff5a
[Firefox: 3 hits: 06-25 to 07-04]
7f6e032fc0
[Firefox: 3 hits: 06-25 to 07-04] none[none]
none [none] Win2K-f 31 of 33 00:18:07 21:21:17 2 none none:none
none:none
none|none
none|none none
none none
none

831f4ee0a7
[Firefox:678 hits: 07-11 to 07-04] eb7546c600 [0] WinXP 29 of 29 19:21:36 19:21:36 1 none ASM:Graph
none|none 100% lines=61 trace

309c79f8d9
NEW
4b1e5a8e77
NEW none[none]
none [none] Win2K-f 32 of 33 20:36:44 20:36:44 1 none none:none
none:none
none|none
none|none none
none none
none

17028f1eda
[Firefox:15 hits: 09-29 to 06-26] none[3] WinXP 31 of 32 09:34:32 09:34:32 1 none none:none
tElock| none trace

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
73f1082158
[Firefox:174 hits: 06-18 to 07-04]
b5919931fe
[Firefox:61 hits: 06-20 to 07-04] none[4]
73f1082158[1]
b5919931fe[1] Win2K-f 0 of 32 02:14:58 23:09:09 7 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

2ef9098242
NEW
d789c8d157
NEW none[none]
none [none] Win2K-f 31 of 33 06:54:54 06:54:54 1 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
57ce4acac2
[Firefox:35 hits: 06-17 to 07-04] none[4]
57ce4acac2[1] WinXP 0 of 33 17:40:03 17:40:03 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

dd98c3c108
[Firefox: 3 hits: 06-24 to 07-04] dd98c3c108 [1] Win2K-f 29 of 33 07:20:12 07:20:12 1 none ASM:Graph
Armadillo| 47% lines=82 trace

ae43bb721a
[Firefox: 3 hits: 06-19 to 06-30] ae43bb721a [1] Win2K-f 29 of 33 10:48:30 10:48:30 1 none ASM:Graph
Armadillo| 47% lines=81 trace

1a2c0e6130
[Firefox:450 hits: 12-31 to 07-04] 048df78048 [0] WinXP 29 of 29 04:23:37 18:10:38 4 none ASM:Graph
none|none 100% lines=61 trace

12df83cb4f
[Firefox: 6 hits: 06-19 to 07-04] 12df83cb4f [1] Win2K-f 28 of 33 18:37:56 18:37:56 1 none ASM:Graph
Armadillo| 47% lines=82 trace

4ca3056804
[Firefox: 2 hits: 06-18 to 07-04] 4ca3056804 [1] Win2K-f 1 of 33 18:08:08 18:08:08 1 none ASM:Graph
Armadillo| 47% lines=81 trace

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
a08f3b74a4
[Firefox:135 hits: 06-18 to 07-04] none[4]
a08f3b74a4[1] Win2K-f 0 of 33 05:05:03 18:41:07 5 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

0c1c51204b
[Firefox: 2 hits: 06-18 to 07-02]
3d293743d8
[Firefox: 2 hits: 06-18 to 07-02]
a014934a72
[Firefox:58 hits: 06-28 to 07-02] 0c1c51204b [1]
none [4]
none [none] WinXP 27 of 33 07:40:12 07:40:12 1 none ASM:Graph
none:none
none:none
Armadillo|
PolyEnE|
none|none lines=82
none
none trace
trace
none

777e93c56a
NEW none[none] Win2K-f 31 of 33 23:32:13 23:32:13 1 none none:none
none|none none none

12df83cb4f
[Firefox: 6 hits: 06-19 to 07-04]
2e7dc3f066
[Firefox: 6 hits: 06-19 to 07-04] 12df83cb4f [1]
none [4] Win2K-f 30 of 33 18:37:56 18:37:56 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

034e57c5e5
NEW none[none] WinXP 29 of 33 14:39:45 14:39:45 1 none none:none
none|none none none

01efbb6280
NEW none[none] WinXP 32 of 33 01:33:27 01:33:27 1 none none:none
none|none none none

dd98c3c108
[Firefox: 3 hits: 06-24 to 07-04]
e98746deb1
[Firefox: 3 hits: 06-24 to 07-04] dd98c3c108 [1]
none [4] Win2K-f 31 of 33 07:20:12 07:20:12 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

0c1c51204b
[Firefox: 2 hits: 06-18 to 07-02] 0c1c51204b [1] WinXP 29 of 33 07:40:12 07:40:12 1 none ASM:Graph
Armadillo| 48% lines=82 trace

56a3822608
NEW none[none] WinXP 31 of 33 21:15:42 21:15:42 1 none none:none
none|none none none

56a3822608
NEW
a4c433c5d3
NEW none[none]
none [none] WinXP 28 of 33 21:15:42 21:15:42 1 none none:none
none:none
none|none
none|none none
none none
none

3373948767
NEW
c73f738c30
NEW none[none]
none [none] WinXP 29 of 33 19:28:39 19:28:39 1 none none:none
none:none
none|none
none|none none
none none
none

6ec2a8994b
[Firefox: 3 hits: 06-18 to 06-26] none[4] Win2K-f 30 of 33 21:32:54 21:32:54 1 none none:none
tElock| none trace

6e9e655f3c
[Firefox:10 hits: 05-01 to 06-11] fddd4e56b0 [0] WinXP 29 of 29 02:31:27 02:33:48 2 none ASM:Graph
PolyEnE| 99% lines=68 trace

6c36e19037
[Firefox: 8 hits: 06-22 to 07-02] none[4] Win2K-f
WinXP 27 of 32 09:59:03 10:03:36 2 none none:none
none|none none trace

309c79f8d9
NEW none[none] Win2K-f 28 of 32 20:36:44 20:36:44 1 none none:none
none|none none none

b12e5dfed0
NEW
dc92683d9a
[Firefox: 3 hits: 06-19 to 06-21] none[4]
dc92683d9a[1] Win2K-f 29 of 33 19:53:31 19:53:31 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

bca9e0fb5f
[Firefox: 7 hits: 06-18 to 06-30]
e53a9ea82e
[Firefox: 7 hits: 06-18 to 06-30] none[4]
e53a9ea82e[1] Win2K-f 23 of 33 18:18:17 18:18:17 1 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

53bfe15e91
[Firefox:390 hits: 06-17 to 07-04]
73f1082158
[Firefox:174 hits: 06-18 to 07-04]
e07c29c4ae
[Firefox:62 hits: 06-19 to 07-04] none[4]
73f1082158[1]
e07c29c4ae[1] WinXP 0 of 33 15:47:57 20:50:56 3 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

3cd7958258
[Firefox: 4 hits: 06-17 to 06-25] none[4] WinXP 30 of 33 00:14:27 00:14:27 1 none none:none
tElock| none trace

7f60162c2c
[Firefox:1380 hits: 12-31 to 07-03] 1aad8e4632 [0] WinXP 25 of 25 13:27:31 17:32:51 4 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

95a2ce869c
NEW
bc2aa50683
NEW none[none]
none [none] WinXP 30 of 33 15:47:57 15:47:57 1 none none:none
none:none
none|none
none|none none
none none
none

3cd7958258
[Firefox: 4 hits: 06-17 to 06-25]
41efedf70f
[Firefox: 3 hits: 06-19 to 06-25] none[4]
41efedf70f[1] WinXP 28 of 32 00:14:27 00:14:27 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

3373948767
NEW none[none] WinXP 30 of 33 19:28:39 19:28:39 1 none none:none
none|none none none

b12e5dfed0
NEW none[4] Win2K-f 30 of 33 19:53:31 19:53:31 1 none none:none
tElock| none trace

ef6ce4f6ac
NEW none[none] Win2K-f 30 of 33 22:43:55 22:43:55 1 none none:none
none|none none none

3ae357d17b
[Firefox:729 hits: 05-01 to 07-02] 462a7be171 [0] WinXP 29 of 29 07:04:06 15:41:14 2 none ASM:Graph
PolyEnE| 99% lines=73 trace

4c3df24b32
[Firefox:50 hits: 06-17 to 07-04]
f7f799f818
NEW 4c3df24b32 [1]
none [4] Win2K-f 29 of 32 07:57:44 07:57:44 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

1898e66cd2
[Firefox: 4 hits: 05-20 to 06-23] none[4] WinXP 31 of 32 05:09:27 05:09:27 1 none none:none
PolyEnE| none trace

ae4bed1aa9
[Firefox: 3 hits: 06-21 to 07-01] ae4bed1aa9 [1] Win2K-f 29 of 33 14:18:44 14:18:44 1 none ASM:Graph
Armadillo| 47% lines=81 trace

7d99b0e910
[Firefox:3137 hits: 12-31 to 07-04] 7a70e1b592 [0] WinXP 26 of 28 05:35:36 22:20:49 7 none ASM:Graph
PolyEnE| 99% lines=68 trace

3ed16ae12d
[Firefox: 2 hits: 06-19 to 07-03]
79c01ec060
[Firefox: 6 hits: 06-18 to 07-03] 3ed16ae12d [1]
none [4] WinXP 33 of 33 03:30:25 03:30:25 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

2c2f04d480
NEW none[none] WinXP 25 of 33 10:36:23 10:36:23 1 none none:none
none|none none none

ae43bb721a
[Firefox: 3 hits: 06-19 to 06-30]
b5919931fe
[Firefox:61 hits: 06-20 to 07-04]
b5a9a8f575
[Firefox: 3 hits: 06-19 to 06-30] ae43bb721a [1]
b5919931fe[1]
none [4] Win2K-f 30 of 33 10:48:30 10:48:30 1 none ASM:Graph
ASM:Graph
none:none
Armadillo|
ASProtect|
StarForce| lines=81
lines=90
none trace
trace
trace

168aab35a3
[Firefox:35 hits: 06-17 to 07-04]
d59714403a
NEW none[4]
none [none] Win2K-f 30 of 33 21:25:26 21:25:26 1 none none:none
none:none
tElock|
none|none none
none trace
none

2ef9098242
NEW none[none] Win2K-f 30 of 33 06:54:54 06:54:54 1 none none:none
none|none none none

95a2ce869c
NEW none[none] WinXP 27 of 33 15:47:57 15:47:57 1 none none:none
none|none none none