Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
73f1082158
[Firefox:300 hits: 06-18 to 07-12]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:32:45 21:25:37 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f6ea12654
NEW		 none[none] WinXP 32 of 33 21:24:44 21:24:44 1 none none:none
 none|none none none
a014934a72
[Firefox:69 hits: 06-28 to 07-11]
dfcd73f7a7
[Firefox: 4 hits: 07-03 to 07-12]		 none[none]
none [none]		 Win2K-f
WinXP		 30 of 33 17:07:43 17:17:35 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f58222344f
[Firefox:15 hits: 12-31 to 07-09]		 2a56436a64 [0] WinXP 28 of 31 03:13:34 03:13:34 1 none ASM:Graph
 PolyEnE| 54% lines=265
embedded dns		 trace
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]		 none[4] Win2K-f
WinXP		 33 of 33 00:32:45 21:25:37 23 none none:none
 tElock| none trace
1f5e79b151
NEW
9310fe936e
NEW		 none[none]
none [none]		 Win2K-f 32 of 33 17:24:50 17:24:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9f886e1087
NEW		 none[none] Win2K-f 29 of 33 11:20:14 11:21:07 2 none none:none
 none|none none none
b8d8774b59
NEW		 none[none] Win2K-f 32 of 33 09:28:33 09:28:33 1 none none:none
 none|none none none
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
b5919931fe
[Firefox:116 hits: 06-20 to 07-12]
b7082104e4
[Firefox:38 hits: 06-18 to 07-12]		 none[4]
b5919931fe[1]
none [4]		 Win2K-f
WinXP		 8 of 33 03:10:24 17:57:53 3 none none:none
ASM:Graph
none:none
 tElock|
ASProtect|
tElock|		 none
lines=90
none		 trace
trace
trace
c7fd48a934
NEW		 none[none] WinXP 5 of 32 02:34:51 02:34:51 1 none none:none
 none|none none none
69be040d0b
[Firefox: 3 hits: 06-21 to 07-02]		 none[4] Win2K-f 30 of 33 01:37:03 01:37:03 1 none none:none
 tElock| none trace
9242113c52
NEW
92df1d8b32
NEW		 none[none]
none [none]		 Win2K-f 32 of 33 17:37:23 17:37:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5913ead1a1
[Firefox: 2 hits: 06-18 to 07-11]
ac99506c36
[Firefox: 2 hits: 06-18 to 07-11]		 5913ead1a1 [1]
none [4]		 WinXP 31 of 33 14:25:47 14:25:47 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
252e07202f
NEW		 none[none] Win2K-f 31 of 33 11:20:14 11:20:14 1 none none:none
 none|none none none
8e4e9c46a1
NEW		 none[none] WinXP 33 of 33 08:22:18 08:22:18 1 none none:none
 none|none none none
69be040d0b
[Firefox: 3 hits: 06-21 to 07-02]
81bbbeac34
[Firefox: 3 hits: 06-21 to 07-02]		 none[4]
81bbbeac34[1]		 Win2K-f 30 of 33 01:37:03 01:37:03 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
2b8c0ae381
NEW		 none[none] WinXP 32 of 33 20:33:59 20:33:59 1 none none:none
 none|none none none
168aab35a3
[Firefox:49 hits: 06-17 to 07-12]		 none[4] Win2K-f
WinXP		 31 of 33 04:02:27 22:16:12 3 none none:none
 tElock| none trace
6686b0fe5f
[Firefox: 2 hits: 06-06 to 07-08]		 none[4] Win2K-f 20 of 32 02:14:21 02:14:21 1 none none:none
 ASProtect| none trace
e8d4d8cde1
[Firefox:323 hits: 03-31 to 07-08]		 fda109a6fd [0] Win2K-f
WinXP		 13 of 31 02:13:12 02:48:41 3 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
cb7afa263c
NEW		 none[none] WinXP 31 of 32 04:04:17 04:04:17 1 none none:none
 none|none none none
a12cab51ef
[Firefox:1111 hits: 05-01 to 07-12]		 40f7f463c4 [0] WinXP 29 of 29 11:51:24 13:21:32 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
03f912899b
[Firefox:41 hits: 12-14 to 07-12]		 83893bd25d [0] WinXP 32 of 32 13:29:47 15:45:55 3 none ASM:Graph
 none|none 100% lines=65 trace
87004ccddb
NEW		 none[none] WinXP 33 of 33 08:13:55 08:15:44 2 none none:none
 none|none none none
cce9566ceb
[Firefox:26 hits: 06-12 to 07-10]		 none[4] WinXP 31 of 32 11:26:37 11:26:37 1 none none:none
 PolyEnE| none trace
a704164588
[Firefox: 3 hits: 07-04 to 07-09]		 none[none] WinXP 31 of 33 06:00:17 06:00:17 1 none none:none
 none|none none none
6db3373938
NEW		 none[none] WinXP 29 of 32 22:23:14 22:23:14 1 none none:none
 none|none none none
7fdfe363d5
[Firefox:2864 hits: 12-31 to 07-12]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 01:49:11 22:35:04 29 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
168aab35a3
[Firefox:49 hits: 06-17 to 07-12]
4c3df24b32
[Firefox:81 hits: 06-17 to 07-12]		 none[4]
4c3df24b32[1]		 WinXP
Win2K-f		 0 of 33 03:20:18 22:16:12 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a704164588
[Firefox: 3 hits: 07-04 to 07-09]
eb270b5ad2
NEW		 none[none]
none [none]		 WinXP 30 of 32 06:00:17 06:00:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
741e3b03b3
[Firefox:150 hits: 09-28 to 07-12]		 e0197e8a64 [0] WinXP 31 of 32 02:55:53 16:18:22 4 none ASM:Graph
 none|none 100% lines=62 trace
2949152a24
[Firefox: 2 hits: 07-02 to 07-06]		 none[none] Win2K-f 30 of 32 19:22:00 19:22:00 1 none none:none
 none|none none none
e286d9e6a9
NEW		 none[none] Win2K-f
WinXP		 21 of 33 11:52:16 23:06:28 3 none none:none
 none|none none none
831f4ee0a7
[Firefox:691 hits: 07-11 to 07-11]		 eb7546c600 [0] WinXP 29 of 29 14:12:59 18:59:35 2 none ASM:Graph
 none|none 100% lines=61 trace
b4576532a0
NEW		 none[4] WinXP 22 of 32 18:26:04 18:26:04 1 none none:none
 ASPack| none trace
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
b5919931fe
[Firefox:116 hits: 06-20 to 07-12]		 none[4]
b5919931fe[1]		 Win2K-f 0 of 32 00:32:45 17:57:53 5 none none:none
ASM:Graph
 tElock|
ASProtect|		 48% none
lines=90		 trace
trace
b2178fdd32
NEW		 none[none] WinXP 29 of 32 20:33:12 20:33:12 1 none none:none
 none|none none none
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
57ce4acac2
[Firefox:54 hits: 06-17 to 07-12]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 06:48:15 18:54:01 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2ef2f78792
[Firefox: 6 hits: 06-21 to 07-10]
b7a332eb7c
[Firefox: 6 hits: 06-21 to 07-10]		 2ef2f78792 [1]
none [4]		 Win2K-f 30 of 33 12:14:09 12:14:09 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
1a2c0e6130
[Firefox:479 hits: 12-31 to 07-12]		 048df78048 [0] WinXP 29 of 29 07:18:58 07:18:58 1 none ASM:Graph
 none|none 100% lines=61 trace
9242113c52
NEW
92df1d8b32
NEW
a014934a72
[Firefox:69 hits: 06-28 to 07-11]		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 27 of 33 17:17:35 17:37:23 3 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
a08f3b74a4
[Firefox:199 hits: 06-18 to 07-12]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 04:22:57 19:23:22 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
f99b3c8fe6
NEW		 none[none] Win2K-f 32 of 33 18:41:24 18:41:24 1 none none:none
 none|none none none
bce12aa21f
[Firefox:24 hits: 05-12 to 07-11]		 none[4] WinXP 31 of 33 12:58:30 12:58:30 1 none none:none
 PolyEnE| none trace
a3f358bd55
[Firefox: 6 hits: 08-25 to 06-19]		 none[4] WinXP 32 of 32 21:34:15 21:34:15 1 none none:none
 PolyEnE| none trace
1c3210698a
NEW		 none[none] Win2K-f 29 of 33 13:35:26 13:35:26 1 none none:none
 none|none none none
1e03efd64c
NEW		 none[none] WinXP 33 of 33 17:33:09 17:33:09 1 none none:none
 none|none none none
607b60ad51
[Firefox: 6 hits: 06-20 to 07-12]
e5c7bce70e
[Firefox: 6 hits: 06-20 to 07-12]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 16:39:44 16:39:44 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
ad0c5ff63e
[Firefox: 2 hits: 07-03 to 07-06]		 none[none] WinXP 31 of 33 07:22:49 07:22:49 1 none none:none
 none|none none none
07fabc79ef
[Firefox: 5 hits: 06-19 to 07-08]		 07fabc79ef [1] Win2K-f
WinXP		 0 of 32 07:15:26 07:15:42 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
df17a625ee
[Firefox:485 hits: 05-04 to 07-12]		 9bbdd086c5 [0] WinXP 29 of 29 07:11:02 07:11:02 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
48ff2434c0
NEW		 none[none] WinXP 30 of 32 18:31:38 18:31:38 1 none none:none
 none|none none none
0dc39cd3c1
[Firefox: 4 hits: 06-27 to 07-11]		 none[none] WinXP 0 of 0 09:15:27 09:15:27 1 none none:none
 none|none none none
23c32fbd78
[Firefox: 7 hits: 05-03 to 07-12]		 none[4] Win2K-f 16 of 31 02:12:08 02:12:08 1 none none:none
 PeCompact| none trace
986b59708d
[Firefox:303 hits: 05-03 to 07-11]		 8a00217866 [0] WinXP 29 of 29 01:06:12 01:06:12 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
f12583a6d2
NEW		 none[none] Win2K-f
WinXP		 20 of 32 08:10:11 23:42:40 43 none none:none
 none|none none none
1f5e79b151
NEW		 none[none] Win2K-f 29 of 33 17:24:50 17:24:50 1 none none:none
 none|none none none
d6df3972a0
[Firefox:220 hits: 05-02 to 07-11]		 39eeef52a4 [0] WinXP 29 of 29 06:17:14 06:17:14 1 none ASM:Graph
 PolyEnE| 100% lines=65 trace
97764d927e
NEW		 none[none] Win2K-f 31 of 33 19:07:04 19:07:04 1 none none:none
 none|none none none
b51c7dc59d
NEW		 none[none] Win2K-f 30 of 33 05:22:54 05:22:54 1 none none:none
 none|none none none
6887c0c417
[Firefox:12 hits: 08-17 to 07-02]		 0a9bea2750 [0] WinXP 25 of 29 06:03:39 06:03:39 1 none ASM:Graph
 FSG| 93% lines=1932
embedded dns		 trace
82a2f48f4b
NEW		 none[none] Win2K-f 30 of 32 12:53:39 12:53:39 1 none none:none
 none|none none none
2949152a24
[Firefox: 2 hits: 07-02 to 07-06]
f1a10a0d85
[Firefox: 2 hits: 07-02 to 07-06]		 none[none]
none [none]		 Win2K-f 30 of 33 19:22:00 19:22:00 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:49 hits: 06-17 to 07-12]
4c3df24b32
[Firefox:81 hits: 06-17 to 07-12]
e07c29c4ae
[Firefox:87 hits: 06-19 to 07-12]		 none[4]
4c3df24b32[1]
e07c29c4ae[1]		 WinXP 0 of 33 09:15:27 22:16:12 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
87835b2882
NEW		 none[none] Win2K-f 19 of 33 11:37:53 11:37:53 1 none none:none
 none|none none none
5913ead1a1
[Firefox: 2 hits: 06-18 to 07-11]		 5913ead1a1 [1] WinXP 29 of 33 14:25:47 14:25:47 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
319dddbd87
NEW		 none[none] WinXP 31 of 33 20:42:14 20:42:14 1 none none:none
 none|none none none
3690b64ca2
[Firefox: 4 hits: 06-18 to 06-25]		 none[4] WinXP 32 of 33 18:42:43 18:42:43 1 none none:none
 PolyEnE| none trace
53bfe15e91
[Firefox:615 hits: 06-17 to 07-12]
8020eb2d22
NEW		 none[4]
none [none]		 WinXP 29 of 33 21:19:31 21:19:31 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
0dc39cd3c1
[Firefox: 4 hits: 06-27 to 07-11]
a120847406
[Firefox: 4 hits: 06-27 to 07-11]		 none[none]
none [none]		 WinXP 32 of 33 09:15:27 09:15:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2dd94db23c
NEW		 none[none] Win2K-f 2 of 32 09:32:12 09:32:12 1 none none:none
 none|none none none
9242113c52
NEW		 none[none] Win2K-f 29 of 33 17:37:23 17:37:23 1 none none:none
 none|none none none
3690b64ca2
[Firefox: 4 hits: 06-18 to 06-25]
a6fb77fd26
[Firefox: 4 hits: 06-18 to 06-25]		 none[4]
a6fb77fd26[1]		 WinXP 30 of 33 18:42:43 18:42:43 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=82		 trace
trace
ca65a289a3
NEW		 none[none] Win2K-f 32 of 33 18:36:31 18:36:31 1 none none:none
 none|none none none
bfb1452860
NEW		 none[none] Win2K-f 2 of 33 08:40:39 08:40:39 1 none none:none
 none|none none none
f806c334f0
NEW		 none[none] Win2K-f 31 of 33 15:12:54 16:46:57 2 none none:none
 none|none none none
7d99b0e910
[Firefox:3189 hits: 12-31 to 07-12]		 7a70e1b592 [0] WinXP 26 of 28 00:47:28 19:48:02 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
2c2f04d480
[Firefox: 2 hits: 07-05 to 07-09]		 none[none] WinXP 25 of 33 22:38:03 22:38:03 1 none none:none
 none|none none none
366148f7b7
[Firefox: 2 hits: 07-06 to 07-11]		 none[none] WinXP 31 of 33 02:45:04 05:52:44 2 none none:none
 none|none none none
4c3df24b32
[Firefox:81 hits: 06-17 to 07-12]
58408136a4
[Firefox: 4 hits: 06-28 to 07-12]		 4c3df24b32 [1]
none [none]		 WinXP 32 of 33 03:20:18 03:20:18 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
607b60ad51
[Firefox: 6 hits: 06-20 to 07-12]		 none[4] WinXP 31 of 32 16:39:44 16:39:44 1 none none:none
 tElock| none trace
319dddbd87
NEW
bcabcc7cc3
NEW		 none[none]
none [none]		 WinXP 30 of 33 20:42:14 20:42:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2ef2f78792
[Firefox: 6 hits: 06-21 to 07-10]		 2ef2f78792 [1] Win2K-f 29 of 33 12:14:09 12:14:09 1 none ASM:Graph
 Armadillo| 48% lines=82 trace