Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


12 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6ec2a8994b
[Firefox: 5 hits: 06-18 to 07-08]
857b781ca9
[Firefox: 4 hits: 06-18 to 07-05]		 none[4]
857b781ca9[1]		 Win2K-f 29 of 33 00:19:07 00:19:07 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
73f1082158
[Firefox:283 hits: 06-18 to 07-11]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:17:51 23:03:51 17 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
dfcd73f7a7
[Firefox: 2 hits: 07-03 to 07-03]		 none[none] Win2K-f
WinXP		 30 of 33 01:49:29 06:10:07 2 none none:none
 none|none none none
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]		 none[4] Win2K-f
WinXP		 33 of 33 00:17:51 23:03:51 34 none none:none
 tElock| none trace
5089fbb75a
NEW		 none[none] WinXP 33 of 33 08:58:35 08:58:35 1 none none:none
 none|none none none
996e7053d5
NEW		 none[none] WinXP 33 of 33 03:55:05 03:55:05 1 none none:none
 none|none none none
252e07202f
NEW
9f886e1087
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 09:57:09 09:57:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
b7082104e4
[Firefox:35 hits: 06-18 to 07-11]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 01:15:26 16:29:23 3 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
4c3df24b32
[Firefox:76 hits: 06-17 to 07-11]
8390780c27
[Firefox:16 hits: 06-18 to 07-11]		 4c3df24b32 [1]
none [4]		 WinXP 30 of 32 15:09:55 15:09:55 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
252e07202f
NEW		 none[none] Win2K-f 31 of 33 09:57:09 09:57:09 1 none none:none
 none|none none none
168aab35a3
[Firefox:48 hits: 06-17 to 07-10]		 none[4] Win2K-f 31 of 33 14:25:06 14:25:06 1 none none:none
 tElock| none trace
9d77b4ca8e
NEW		 none[none] WinXP 30 of 33 13:45:55 13:45:55 1 none none:none
 none|none none none
bca9e0fb5f
[Firefox:11 hits: 06-18 to 07-11]		 none[4] Win2K-f 31 of 32 20:47:36 20:47:36 1 none none:none
 PolyEnE| none trace
d42c1cc7c0
[Firefox:314 hits: 05-01 to 07-07]		 af9ca5bed1 [0] WinXP 29 of 29 11:40:27 11:40:27 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
533d15b5ce
[Firefox: 6 hits: 06-21 to 07-11]		 none[4] Win2K-f 30 of 33 11:34:55 11:34:55 1 none none:none
 tElock| none trace
6200072917
NEW		 none[none] WinXP 33 of 33 01:03:18 01:03:18 1 none none:none
 none|none none none
a12cab51ef
[Firefox:1108 hits: 05-01 to 07-11]		 40f7f463c4 [0] WinXP 29 of 29 04:36:52 21:35:55 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
830cb87006
NEW
d987581a5b
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 06:55:42 06:55:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
03f912899b
[Firefox:39 hits: 12-14 to 07-09]		 83893bd25d [0] WinXP 32 of 32 00:06:00 22:57:43 2 none ASM:Graph
 none|none 100% lines=65 trace
47f551924a
NEW		 none[none] Win2K-f
WinXP		 31 of 33 12:30:21 19:59:43 2 none none:none
 none|none none none
4c3df24b32
[Firefox:76 hits: 06-17 to 07-11]		 4c3df24b32 [1] WinXP
Win2K-f		 0 of 33 10:26:42 21:58:19 5 none ASM:Graph
 Armadillo| 47% lines=81 trace
7fdfe363d5
[Firefox:2847 hits: 12-31 to 07-05]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 03:07:32 22:35:02 17 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
7bd63bb17d
NEW		 none[none] WinXP 33 of 33 20:14:05 20:14:29 2 none none:none
 none|none none none
6d86a1ff5a
[Firefox:14 hits: 06-25 to 07-11]		 none[none] Win2K-f 28 of 33 19:38:34 19:38:34 1 none none:none
 none|none none none
47f551924a
NEW
9eb51ec623
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 29 of 33 12:30:21 19:59:43 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
741e3b03b3
[Firefox:147 hits: 09-28 to 07-11]		 e0197e8a64 [0] WinXP 31 of 32 04:52:03 21:57:30 3 none ASM:Graph
 none|none 100% lines=62 trace
73797b1b58
NEW
c32626f3bd
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 07:58:24 21:04:58 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d86a1ff5a
[Firefox:14 hits: 06-25 to 07-11]
7f6e032fc0
[Firefox:14 hits: 06-25 to 07-11]		 none[none]
none [none]		 Win2K-f 31 of 33 19:38:34 19:38:34 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
533d15b5ce
[Firefox: 6 hits: 06-21 to 07-11]
58c343a8d8
[Firefox: 6 hits: 06-21 to 07-11]		 none[4]
58c343a8d8[1]		 Win2K-f 28 of 33 11:34:55 11:34:55 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3caf27c754
[Firefox: 4 hits: 08-25 to 03-26]		 none[4] WinXP 19 of 32 01:05:20 01:05:20 1 none none:none
 PolyEnE| none trace
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
a08f3b74a4
[Firefox:190 hits: 06-18 to 07-11]
b5919931fe
[Firefox:108 hits: 06-20 to 07-11]		 none[4]
a08f3b74a4[1]
b5919931fe[1]		 Win2K-f 0 of 32 01:15:26 22:25:09 8 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
93385541f3
[Firefox: 8 hits: 06-22 to 07-11]		 none[4] WinXP 32 of 32 16:26:37 16:26:37 1 none none:none
 none|none none trace
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
57ce4acac2
[Firefox:49 hits: 06-17 to 07-10]		 none[4]
57ce4acac2[1]		 WinXP
Win2K-f		 0 of 33 01:29:52 20:57:10 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a63e4eb194
NEW
d12137860e
NEW		 none[none]
none [none]		 WinXP 31 of 33 23:24:20 23:24:20 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7a393628ea
[Firefox: 5 hits: 05-12 to 07-08]		 none[4] WinXP 30 of 32 02:02:00 02:02:00 1 none none:none
 ASProtect| none trace
1a2c0e6130
[Firefox:476 hits: 12-31 to 07-11]		 048df78048 [0] WinXP 29 of 29 00:32:30 08:37:20 3 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
a08f3b74a4
[Firefox:190 hits: 06-18 to 07-11]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 03:43:02 22:25:09 9 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a63e4eb194
NEW		 none[none] WinXP 31 of 33 23:24:20 23:24:20 1 none none:none
 none|none none none
84bea9b7c6
NEW		 none[none] WinXP 30 of 32 14:21:38 14:21:38 1 none none:none
 none|none none none
a4eb225807
NEW
f85f8eb994
NEW		 none[4]
f85f8eb994[1]		 WinXP 29 of 33 03:32:07 03:32:07 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 48% none
lines=82		 trace
trace
32a0d7d0e0
[Firefox:46 hits: 05-04 to 07-08]		 d791762796 [0] WinXP 29 of 29 18:23:56 18:23:56 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
a0139d7ad8
[Firefox:450 hits: 05-02 to 07-06]		 d9e9662db1 [0] WinXP 29 of 29 11:46:27 11:46:27 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ebd2e5da07
NEW		 none[none] Win2K-f 30 of 33 16:21:21 16:21:21 1 none none:none
 none|none none none
73797b1b58
NEW		 none[none] Win2K-f 31 of 33 07:58:24 21:04:58 2 none none:none
 none|none none none
24137d8412
[Firefox:10 hits: 08-02 to 11-01]		 none[none] WinXP 31 of 32 22:22:05 22:22:05 1 none none:none
 none|none none none
00de373b4a
NEW		 none[none] Win2K-f 32 of 33 18:02:48 18:02:48 1 none none:none
 none|none none none
607b60ad51
[Firefox: 5 hits: 06-20 to 07-03]
b5919931fe
[Firefox:108 hits: 06-20 to 07-11]
e5c7bce70e
[Firefox: 5 hits: 06-20 to 07-03]		 none[4]
b5919931fe[1]
e5c7bce70e[1]		 Win2K-f 2 of 32 11:08:54 11:08:54 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
ASProtect|
Armadillo|		 47% none
lines=90
lines=81		 trace
trace
trace
830cb87006
NEW		 none[none] Win2K-f 32 of 33 06:55:42 06:55:42 1 none none:none
 none|none none none
d175bad0e6
[Firefox:15 hits: 06-08 to 06-28]		 dfb15f5463 [0] WinXP 29 of 29 09:57:59 09:57:59 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
a172052409
NEW
acd0af7b38
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 15:42:10 15:42:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6ec2a8994b
[Firefox: 5 hits: 06-18 to 07-08]		 none[4] Win2K-f 30 of 33 00:19:07 00:19:07 1 none none:none
 tElock| none trace
df17a625ee
[Firefox:483 hits: 05-04 to 07-11]		 9bbdd086c5 [0] WinXP 29 of 29 17:05:33 19:11:25 2 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
6c36e19037
[Firefox:11 hits: 06-22 to 07-08]		 none[4] WinXP 27 of 32 15:36:21 15:36:21 1 none none:none
 none|none none trace
a4eb225807
NEW		 none[4] WinXP 29 of 32 03:32:07 03:32:07 1 none none:none
 tElock| none trace
23c32fbd78
[Firefox: 5 hits: 05-03 to 06-25]		 none[4] Win2K-f 16 of 31 06:04:46 07:04:35 2 none none:none
 PeCompact| none trace
7f66e51c85
NEW
9d12fe9d3b
NEW		 none[none]
none [none]		 WinXP 29 of 32 10:34:50 10:34:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a172052409
NEW		 none[none] Win2K-f 29 of 33 15:42:10 15:42:10 1 none none:none
 none|none none none
bca9e0fb5f
[Firefox:11 hits: 06-18 to 07-11]
e53a9ea82e
[Firefox:11 hits: 06-18 to 07-11]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 20:47:36 20:47:36 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
2bb2d962b5
NEW		 none[none] WinXP 7 of 32 09:25:43 09:25:43 1 none none:none
 none|none none none
065070a8bd
NEW		 none[none] Win2K-f 30 of 33 05:09:06 05:09:06 1 none none:none
 none|none none none
53bfe15e91
[Firefox:581 hits: 06-17 to 07-11]
73f1082158
[Firefox:283 hits: 06-18 to 07-11]
e07c29c4ae
[Firefox:82 hits: 06-19 to 07-11]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 08:54:11 23:03:51 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
6e2eaa0359
NEW
740e3bffe0
[Firefox: 2 hits: 06-25 to 07-10]		 none[none]
none [none]		 Win2K-f 24 of 33 13:37:07 13:37:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8178c88f5e
[Firefox: 5 hits: 07-08 to 07-11]		 none[none] WinXP 33 of 33 12:43:03 12:43:03 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1410 hits: 12-31 to 07-11]		 1aad8e4632 [0] WinXP 25 of 25 06:31:47 22:25:01 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
57ce4acac2
[Firefox:49 hits: 06-17 to 07-10]
83f26f5044
[Firefox: 7 hits: 06-20 to 07-10]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 03:23:45 03:23:45 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
042774a2b7
[Firefox:143 hits: 05-01 to 06-21]		 1c9a472cd7 [0] WinXP 29 of 29 19:10:06 19:10:06 1 none ASM:Graph
 PolyEnE| 0% lines=71
embedded dns		 trace
6e2eaa0359
NEW		 none[none] Win2K-f 31 of 33 13:37:07 13:37:07 1 none none:none
 none|none none none
7df41a77e6
[Firefox: 4 hits: 06-16 to 07-01]		 none[4] Win2K-f 30 of 33 19:00:31 19:00:31 1 none none:none
 PolyEnE| none trace
ea096a2bdf
NEW		 none[none] WinXP 31 of 32 22:16:59 22:16:59 1 none none:none
 none|none none none
277034540e
NEW
ea43badccf
NEW		 none[none]
none [none]		 WinXP 31 of 33 16:22:57 16:22:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f36320f8f9
NEW		 none[none] WinXP 33 of 33 15:16:54 15:16:54 1 none none:none
 none|none none none
113c13f1a2
NEW		 none[none] Win2K-f 31 of 32 22:20:01 22:20:01 1 none none:none
 none|none none none
7f66e51c85
NEW		 none[none] WinXP 32 of 33 10:34:50 10:34:50 1 none none:none
 none|none none none
7d99b0e910
[Firefox:3183 hits: 12-31 to 07-11]		 7a70e1b592 [0] WinXP 26 of 28 01:39:40 23:01:50 6 none ASM:Graph
 PolyEnE| 99% lines=68 trace
00de373b4a
NEW
b234759ccf
NEW		 none[none]
none [none]		 Win2K-f 24 of 33 18:02:48 18:02:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
277034540e
NEW		 none[none] WinXP 28 of 33 16:22:57 16:22:57 1 none none:none
 none|none none none
83903b9e4e
NEW		 none[none] WinXP 32 of 33 23:19:48 23:19:48 1 none none:none
 none|none none none
607b60ad51
[Firefox: 5 hits: 06-20 to 07-03]		 none[4] Win2K-f 31 of 32 11:08:54 11:08:54 1 none none:none
 tElock| none trace
4c3df24b32
[Firefox:76 hits: 06-17 to 07-11]
58408136a4
[Firefox: 3 hits: 06-28 to 07-10]		 4c3df24b32 [1]
none [none]		 WinXP 32 of 33 14:27:04 14:27:04 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
dae77d66f3
[Firefox: 4 hits: 07-08 to 07-11]		 none[none] WinXP 31 of 32 22:38:59 22:38:59 1 none none:none
 none|none none none
967040406e
NEW		 none[none] WinXP 31 of 32 07:21:02 07:21:02 1 none none:none
 none|none none none
73f1082158
[Firefox:283 hits: 06-18 to 07-11]
9d677c3f70
NEW		 73f1082158 [1]
none [4]		 Win2K-f 29 of 32 03:12:04 03:12:04 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace