Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


10 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
79a515c871
NEW		 none[4] Win2K-f 31 of 33 11:55:52 11:55:52 1 none none:none
 PolyEnE| none trace
3b2958417b
[Firefox: 2 hits: 07-09 to 07-09]		 none[none] WinXP 33 of 33 18:11:12 18:11:12 1 none none:none
 none|none none none
53bfe15e91
[Firefox:524 hits: 06-17 to 07-09]
73f1082158
[Firefox:248 hits: 06-18 to 07-09]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:10:43 19:46:34 17 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:524 hits: 06-17 to 07-09]		 none[4] Win2K-f
WinXP		 33 of 33 00:10:43 23:31:43 27 none none:none
 tElock| none trace
6884695753
NEW
d36316d3ce
NEW		 none[none]
none [none]		 Win2K-f 30 of 32 23:11:56 23:11:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3f0a5b2ebe
[Firefox: 6 hits: 06-18 to 07-02]
b5919931fe
[Firefox:96 hits: 06-20 to 07-09]
c6bfb5f0f2
[Firefox: 6 hits: 06-18 to 07-02]		 none[4]
b5919931fe[1]
c6bfb5f0f2[1]		 Win2K-f 28 of 32 17:28:02 17:28:02 1 none none:none
ASM:Graph
ASM:Graph
 PolyEnE|
ASProtect|
Armadillo|		 47% none
lines=90
lines=81		 trace
trace
trace
5089fbb75a
NEW		 none[none] WinXP 33 of 33 07:57:40 07:57:40 1 none none:none
 none|none none none
f296d0848c
NEW		 none[none] Win2K-f 31 of 33 22:12:46 22:12:46 1 none none:none
 none|none none none
aeae074a62
NEW		 none[none] WinXP 2 of 33 13:38:38 13:38:38 1 none none:none
 none|none none none
02cab5983b
[Firefox: 4 hits: 06-18 to 07-08]		 none[4] WinXP 31 of 33 17:17:36 17:17:36 1 none none:none
 tElock| none trace
8390780c27
[Firefox:14 hits: 06-18 to 07-08]		 none[4] WinXP 30 of 32 10:36:02 10:36:02 1 none none:none
 tElock| none trace
8a93930ea8
[Firefox: 2 hits: 07-06 to 07-06]
bc94f66052
[Firefox: 2 hits: 07-06 to 07-06]		 none[none]
none [none]		 Win2K-f 32 of 33 09:07:32 23:38:02 3 none none:none
none:none
 none|none
none|none		 none
none		 none
none
ea5389d425
[Firefox:40 hits: 07-06 to 07-07]		 none[none] WinXP 19 of 33 01:40:25 01:40:25 1 none none:none
 none|none none none
0537139fe7
[Firefox: 3 hits: 06-21 to 06-22]		 none[4] WinXP 31 of 33 00:25:30 00:25:30 1 none none:none
 PolyEnE| none trace
3be4dcb123
NEW		 none[none] WinXP 31 of 32 13:38:20 13:38:20 1 none none:none
 none|none none none
168aab35a3
[Firefox:44 hits: 06-17 to 07-09]		 none[4] Win2K-f
WinXP		 31 of 33 06:14:34 15:58:04 4 none none:none
 tElock| none trace
0022c74e8a
NEW		 0022c74e8a [1] Win2K-f 29 of 33 04:56:01 04:56:01 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
c06735945d
NEW		 none[none] WinXP 31 of 33 12:44:05 12:44:05 1 none none:none
 none|none none none
4eda5de38d
NEW
6a9be6af0c
NEW
bbe0c84096
NEW
c5622bb285
[Firefox: 7 hits: 06-23 to 07-07]
dde694c47a
NEW		 none[none]
none [none]
none [none]
none [4]
none [none]		 WinXP 12 of 33 11:01:54 11:01:54 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
trace
none
b5919931fe
[Firefox:96 hits: 06-20 to 07-09]
bca9e0fb5f
[Firefox: 9 hits: 06-18 to 07-06]		 b5919931fe [1]
none [4]		 Win2K-f 31 of 32 05:34:06 05:34:06 1 none ASM:Graph
none:none
 ASProtect|
PolyEnE|		 lines=90
none		 trace
trace
a12cab51ef
[Firefox:1104 hits: 05-01 to 07-09]		 40f7f463c4 [0] WinXP 29 of 29 03:39:10 17:18:34 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f502585714
[Firefox:92 hits: 05-03 to 07-07]		 ae590430c5 [0] WinXP 29 of 29 18:00:31 18:00:40 2 none ASM:Graph
 PolyEnE| 100% lines=63 trace
1801222e74
[Firefox: 2 hits: 07-08 to 07-09]		 none[none] WinXP 33 of 33 12:06:33 12:06:33 1 none none:none
 none|none none none
cce9566ceb
[Firefox:22 hits: 06-12 to 07-09]		 none[4] WinXP 31 of 32 02:10:56 16:49:21 4 none none:none
 PolyEnE| none trace
2ec24780fe
NEW		 none[none] Win2K-f 1 of 33 07:59:40 07:59:40 1 none none:none
 none|none none none
4c3df24b32
[Firefox:71 hits: 06-17 to 07-09]		 4c3df24b32 [1] Win2K-f
WinXP		 0 of 33 09:49:03 22:00:44 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
0537139fe7
[Firefox: 3 hits: 06-21 to 06-22]
49b6f2dd5d
[Firefox: 3 hits: 06-21 to 06-22]		 none[4]
49b6f2dd5d[1]		 WinXP 29 of 33 00:25:30 00:25:30 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
0022c74e8a
NEW
f7eec61c8e
NEW		 0022c74e8a [1]
none [4]		 Win2K-f 29 of 32 04:56:01 04:56:01 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
741e3b03b3
[Firefox:134 hits: 09-28 to 07-09]		 e0197e8a64 [0] WinXP 31 of 32 06:24:53 22:39:31 8 none ASM:Graph
 none|none 100% lines=62 trace
6d86a1ff5a
[Firefox:10 hits: 06-25 to 07-09]		 none[none] WinXP
Win2K-f		 28 of 33 01:08:50 09:31:44 2 none none:none
 none|none none none
4d244a981f
[Firefox: 6 hits: 03-30 to 07-08]		 b66b85d85f [0] WinXP 30 of 31 05:21:50 05:21:50 1 none ASM:Graph
 PolyEnE| 100% lines=129 trace
5f11b319ef
[Firefox: 2 hits: 07-07 to 07-09]
a3f631e410
[Firefox: 2 hits: 07-07 to 07-09]		 none[none]
none [none]		 Win2K-f 31 of 33 21:53:06 21:53:06 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8390780c27
[Firefox:14 hits: 06-18 to 07-08]
af88ae89f8
[Firefox: 2 hits: 06-18 to 06-20]		 none[4]
af88ae89f8[1]		 WinXP 31 of 33 10:36:02 10:36:02 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
6d86a1ff5a
[Firefox:10 hits: 06-25 to 07-09]
7f6e032fc0
[Firefox:10 hits: 06-25 to 07-09]		 none[none]
none [none]		 WinXP
Win2K-f		 31 of 33 01:08:50 09:31:44 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
79a515c871
NEW
b71c74380c
NEW		 none[4]
none [4]		 Win2K-f 27 of 32 11:55:52 11:55:52 1 none none:none
none:none
 PolyEnE|
PolyEnE|		 none
none		 trace
trace
831f4ee0a7
[Firefox:688 hits: 07-11 to 07-09]		 eb7546c600 [0] WinXP 29 of 29 02:50:05 23:34:05 2 none ASM:Graph
 none|none 100% lines=61 trace
2a4ec56dfe
NEW		 none[none] Win2K-f 31 of 33 18:51:04 18:51:04 1 none none:none
 none|none none none
3f0a5b2ebe
[Firefox: 6 hits: 06-18 to 07-02]		 none[4] Win2K-f 32 of 33 17:28:02 17:28:02 1 none none:none
 PolyEnE| none trace
0f55e617b4
NEW		 none[none] Win2K-f 21 of 33 20:58:44 20:58:44 1 none none:none
 none|none none none
5f11b319ef
[Firefox: 2 hits: 07-07 to 07-09]		 none[none] Win2K-f 24 of 33 21:53:06 21:53:06 1 none none:none
 none|none none none
8a93930ea8
[Firefox: 2 hits: 07-06 to 07-06]		 none[none] Win2K-f 24 of 33 09:07:32 23:38:02 3 none none:none
 none|none none none
17028f1eda
[Firefox:19 hits: 09-29 to 07-08]		 none[3] WinXP 31 of 32 13:22:41 13:23:47 2 none none:none
 tElock| none trace
6e2eaa0359
NEW
740e3bffe0
NEW
b5919931fe
[Firefox:96 hits: 06-20 to 07-09]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 00:10:43 20:50:09 7 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
168aab35a3
[Firefox:44 hits: 06-17 to 07-09]
acd2a6266d
[Firefox: 4 hits: 06-19 to 07-04]		 none[4]
acd2a6266d[1]		 Win2K-f 30 of 33 06:14:34 06:14:34 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
57ce4acac2
[Firefox:48 hits: 06-17 to 07-09]		 57ce4acac2 [1] Win2K-f 0 of 33 15:41:18 15:41:18 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
2110c8100f
[Firefox: 6 hits: 06-19 to 07-02]
e818015a89
[Firefox: 5 hits: 06-23 to 07-02]		 none[4]
e818015a89[1]		 WinXP 0 of 0 23:30:51 23:30:51 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
543375ad22
NEW
dc47059490
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 20:58:09 20:58:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
ae43bb721a
[Firefox: 4 hits: 06-19 to 07-05]		 ae43bb721a [1] WinXP 29 of 33 14:41:57 14:41:57 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
2ef2f78792
[Firefox: 5 hits: 06-21 to 07-03]
b7a332eb7c
[Firefox: 5 hits: 06-21 to 07-03]		 2ef2f78792 [1]
none [4]		 Win2K-f 30 of 33 01:47:05 01:47:05 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
1a2c0e6130
[Firefox:467 hits: 12-31 to 07-09]		 048df78048 [0] WinXP 29 of 29 07:20:05 20:25:12 5 none ASM:Graph
 none|none 100% lines=61 trace
4eda5de38d
NEW
6a9be6af0c
NEW
bbe0c84096
NEW
c5622bb285
[Firefox: 7 hits: 06-23 to 07-07]		 none[none]
none [none]
none [none]
none [4]		 WinXP 0 of 0 11:01:54 11:01:54 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
trace
53bfe15e91
[Firefox:524 hits: 06-17 to 07-09]
a08f3b74a4
[Firefox:173 hits: 06-18 to 07-09]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:42:24 23:31:43 9 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a272491856
NEW
f8a6c43c1d
NEW		 none[none]
none [none]		 Win2K-f 29 of 32 07:52:07 07:52:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2ec24780fe
NEW
780febebd5
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 07:59:40 07:59:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8fc270a8ba
NEW
b16e6b2c52
NEW		 none[none]
none [none]		 WinXP 29 of 33 00:58:50 00:58:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1e5df7ba74
[Firefox:27 hits: 03-24 to 07-04]		 a5331b711f [0] WinXP 31 of 32 08:42:24 08:42:30 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
4eda5de38d
NEW
6a9be6af0c
NEW
bbe0c84096
NEW		 none[none]
none [none]
none [none]		 WinXP 17 of 33 11:01:54 11:01:54 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
16874933ea
[Firefox:13 hits: 06-18 to 07-08]
76ee340669
[Firefox:13 hits: 06-18 to 07-08]		 16874933ea [1]
none [4]		 Win2K-f 33 of 33 01:06:09 01:06:09 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
8a75955033
[Firefox: 6 hits: 06-20 to 07-08]
9276c8b36b
[Firefox: 6 hits: 06-20 to 07-08]		 none[4]
9276c8b36b[1]		 Win2K-f 28 of 32 07:00:15 07:00:15 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
df17a625ee
[Firefox:481 hits: 05-04 to 07-09]		 9bbdd086c5 [0] WinXP 29 of 29 23:41:18 23:41:18 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
e30fb27bda
NEW		 none[none] Win2K-f 33 of 33 12:01:11 12:01:11 1 none none:none
 none|none none none
0dc39cd3c1
NEW		 none[none] Win2K-f 0 of 0 13:28:26 23:32:08 2 none none:none
 none|none none none
543375ad22
NEW		 none[none] Win2K-f 28 of 33 20:58:09 20:58:09 1 none none:none
 none|none none none
6884695753
NEW		 none[none] Win2K-f 30 of 33 23:11:56 23:11:56 1 none none:none
 none|none none none
c05385e600
[Firefox:20 hits: 06-24 to 07-06]		 6a383b021d [0] WinXP 29 of 29 02:25:24 02:25:24 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
2110c8100f
[Firefox: 6 hits: 06-19 to 07-02]		 none[4] WinXP 29 of 32 23:30:51 23:30:51 1 none none:none
 PolyEnE| none trace
8fc270a8ba
NEW		 none[none] WinXP 31 of 33 00:58:50 00:58:50 1 none none:none
 none|none none none
16874933ea
[Firefox:13 hits: 06-18 to 07-08]		 16874933ea [1] Win2K-f 29 of 33 01:06:09 01:06:09 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
10e9845a09
NEW		 none[none] Win2K-f 29 of 33 02:04:56 02:04:56 1 none none:none
 none|none none none
b5919931fe
[Firefox:96 hits: 06-20 to 07-09]
bca9e0fb5f
[Firefox: 9 hits: 06-18 to 07-06]
e53a9ea82e
[Firefox: 9 hits: 06-18 to 07-06]		 b5919931fe [1]
none [4]
e53a9ea82e[1]		 Win2K-f 23 of 33 05:34:06 05:34:06 1 none ASM:Graph
none:none
ASM:Graph
 ASProtect|
PolyEnE|
Armadillo|		 47% lines=90
none
lines=81		 trace
trace
trace
a272491856
NEW		 none[none] Win2K-f 31 of 33 07:52:07 07:52:07 1 none none:none
 none|none none none
53bfe15e91
[Firefox:524 hits: 06-17 to 07-09]
a08f3b74a4
[Firefox:173 hits: 06-18 to 07-09]
e07c29c4ae
[Firefox:77 hits: 06-19 to 07-09]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 00:25:30 14:14:52 3 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
0f55e617b4
NEW
4c764cd519
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 20:58:44 20:58:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6e2eaa0359
NEW
740e3bffe0
NEW		 none[none]
none [none]		 Win2K-f 24 of 33 20:50:09 20:50:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a75955033
[Firefox: 6 hits: 06-20 to 07-08]		 none[4] Win2K-f 29 of 32 07:00:15 07:00:15 1 none none:none
 tElock| none trace
232b3ac368
NEW
64afe11bcc
NEW		 none[none]
none [none]		 Win2K-f 30 of 32 12:28:24 12:28:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
02cab5983b
[Firefox: 4 hits: 06-18 to 07-08]
76e6f343c5
[Firefox: 4 hits: 06-18 to 07-08]		 none[4]
76e6f343c5[1]		 WinXP 30 of 33 17:17:36 17:17:36 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3cd7958258
[Firefox: 5 hits: 06-17 to 07-05]		 none[4] WinXP 30 of 33 12:44:55 12:44:55 1 none none:none
 tElock| none trace
8178c88f5e
[Firefox: 3 hits: 07-08 to 07-09]		 none[none] WinXP 33 of 33 12:46:48 12:46:48 1 none none:none
 none|none none none
57ce4acac2
[Firefox:48 hits: 06-17 to 07-09]
83f26f5044
[Firefox: 6 hits: 06-20 to 07-07]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 15:41:18 15:41:18 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
0dc39cd3c1
NEW
a120847406
NEW		 none[none]
none [none]		 Win2K-f 32 of 33 13:28:26 23:32:08 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:1403 hits: 12-31 to 07-08]		 1aad8e4632 [0] WinXP 25 of 25 00:44:12 05:22:26 3 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
6e2eaa0359
NEW		 none[none] Win2K-f 31 of 33 20:50:09 20:50:09 1 none none:none
 none|none none none
4eda5de38d
NEW
6a9be6af0c
NEW		 none[none]
none [none]		 WinXP 19 of 33 11:01:54 11:01:54 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4eda5de38d
NEW		 none[none] WinXP 31 of 33 11:01:54 11:01:54 1 none none:none
 none|none none none
232b3ac368
NEW		 none[none] Win2K-f 28 of 33 12:28:24 12:28:24 1 none none:none
 none|none none none
3cd7958258
[Firefox: 5 hits: 06-17 to 07-05]
41efedf70f
[Firefox: 4 hits: 06-19 to 07-05]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 12:44:55 12:44:55 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
965c2ca7e5
NEW		 none[none] WinXP 31 of 33 22:36:08 22:36:08 1 none none:none
 none|none none none
3ae357d17b
[Firefox:735 hits: 05-01 to 07-09]		 462a7be171 [0] WinXP 29 of 29 16:45:54 19:35:47 2 none ASM:Graph
 PolyEnE| 99% lines=73 trace
53bfe15e91
[Firefox:524 hits: 06-17 to 07-09]
991aba5d77
NEW		 none[4]
none [none]		 WinXP 3 of 33 07:35:16 07:35:16 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
7d99b0e910
[Firefox:3170 hits: 12-31 to 07-09]		 7a70e1b592 [0] WinXP 26 of 28 06:02:11 22:30:28 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
bf14e246e6
[Firefox: 7 hits: 07-06 to 07-09]		 none[none] WinXP 19 of 33 11:00:19 11:00:19 1 none none:none
 none|none none none
ae43bb721a
[Firefox: 4 hits: 06-19 to 07-05]
b5a9a8f575
[Firefox: 4 hits: 06-19 to 07-05]		 ae43bb721a [1]
none [4]		 WinXP 30 of 33 14:41:57 14:41:57 1 none ASM:Graph
none:none
 Armadillo|
StarForce|		 lines=81
none		 trace
trace
10e9845a09
NEW
b5919931fe
[Firefox:96 hits: 06-20 to 07-09]
e0faf35825
NEW		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 31 of 33 02:04:56 02:04:56 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
2a4ec56dfe
NEW
37de553249
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 18:51:04 18:51:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:71 hits: 06-17 to 07-09]
58408136a4
[Firefox: 2 hits: 06-28 to 07-06]		 4c3df24b32 [1]
none [none]		 WinXP 32 of 33 22:00:44 22:00:44 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
652180b07c
NEW		 none[none] WinXP 33 of 33 15:23:59 15:23:59 1 none none:none
 none|none none none
40531a3d4c
NEW		 none[none] WinXP 31 of 33 00:39:10 00:39:10 1 none none:none
 none|none none none
2ef2f78792
[Firefox: 5 hits: 06-21 to 07-03]		 2ef2f78792 [1] Win2K-f 29 of 33 01:47:05 01:47:05 1 none ASM:Graph
 Armadillo| 48% lines=82 trace