Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


15 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
c562e2226d
NEW		 none[4]
none [none]		 Win2K-f 1 of 33 01:41:45 01:41:45 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
2ca2e34968
NEW		 none[none] Win2K-f 30 of 33 23:30:49 23:30:49 1 none none:none
 none|none none none
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
73f1082158
[Firefox:315 hits: 06-18 to 07-14]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 03:36:06 23:34:12 11 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
23b2288763
NEW
ef8dc9850c
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 10:06:37 10:06:37 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
378a4bac36
NEW
d11b4c2e19
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 08:09:52 08:09:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f6ea12654
[Firefox: 3 hits: 07-13 to 07-14]		 none[none] WinXP 32 of 33 07:48:33 07:48:33 1 none none:none
 none|none none none
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]		 none[4] WinXP
Win2K-f		 33 of 33 00:34:15 23:34:12 26 none none:none
 tElock| none trace
f787dac1e0
NEW		 none[none] WinXP 33 of 33 03:28:52 03:28:52 1 none none:none
 none|none none none
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
b7082104e4
[Firefox:42 hits: 06-18 to 07-14]		 none[4]
none [4]		 WinXP
Win2K-f		 8 of 33 00:43:41 21:49:02 5 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5aeb9abc92
NEW		 none[none] WinXP 26 of 32 14:14:54 14:14:54 1 none none:none
 none|none none none
765181de43
NEW
aad35e5bc5
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 18:45:25 18:45:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:87 hits: 06-17 to 07-14]
8390780c27
[Firefox:17 hits: 06-18 to 07-12]		 4c3df24b32 [1]
none [4]		 Win2K-f
WinXP		 30 of 32 03:26:28 18:18:04 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
0fb0a0ba76
NEW
618dc6f4bb
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 02:06:31 02:06:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1509c8d024
[Firefox: 7 hits: 06-17 to 07-07]
bd3f6e4ea3
NEW		 none[4]
none [none]		 Win2K-f 31 of 33 21:47:45 21:47:45 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
d42c1cc7c0
[Firefox:316 hits: 05-01 to 07-14]		 af9ca5bed1 [0] WinXP 29 of 29 14:16:51 14:16:51 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1116 hits: 05-01 to 07-14]		 40f7f463c4 [0] WinXP 29 of 29 09:54:37 21:39:36 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
330e249237
NEW		 none[none] WinXP 30 of 32 07:17:02 07:17:02 1 none none:none
 none|none none none
765181de43
NEW		 none[none] Win2K-f 31 of 33 18:45:25 18:45:25 1 none none:none
 none|none none none
cce9566ceb
[Firefox:29 hits: 06-12 to 07-14]		 none[4] WinXP 31 of 32 02:53:42 02:53:42 1 none none:none
 PolyEnE| none trace
38051f1669
[Firefox: 3 hits: 08-30 to 12-11]		 none[none] WinXP 29 of 32 20:44:03 20:44:03 1 none none:none
 none|none none none
3101b958d3
NEW		 none[none] WinXP 0 of 33 09:11:34 09:11:34 1 none none:none
 none|none none none
7fdfe363d5
[Firefox:2908 hits: 12-31 to 07-14]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 00:11:18 23:28:55 25 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:87 hits: 06-17 to 07-14]		 4c3df24b32 [1] Win2K-f
WinXP		 0 of 33 03:26:28 18:18:04 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
741e3b03b3
[Firefox:158 hits: 09-28 to 07-14]		 e0197e8a64 [0] WinXP 31 of 32 02:44:59 21:22:25 2 none ASM:Graph
 none|none 100% lines=62 trace
5f11b319ef
[Firefox: 3 hits: 07-07 to 07-10]
a3f631e410
[Firefox: 3 hits: 07-07 to 07-10]		 none[none]
none [none]		 Win2K-f 31 of 33 10:22:28 10:22:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
e286d9e6a9
[Firefox:11 hits: 07-13 to 07-14]		 none[none] WinXP
Win2K-f		 21 of 33 13:20:26 15:12:55 3 none none:none
 none|none none none
831f4ee0a7
[Firefox:695 hits: 07-11 to 07-14]		 eb7546c600 [0] WinXP 29 of 29 01:53:26 17:33:58 6 none ASM:Graph
 none|none 100% lines=61 trace
58c343a8d8
[Firefox: 7 hits: 06-21 to 07-12]		 58c343a8d8 [1] Win2K-f 28 of 33 06:15:10 06:15:10 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
5f11b319ef
[Firefox: 3 hits: 07-07 to 07-10]		 none[none] Win2K-f 24 of 33 10:22:28 10:22:28 1 none none:none
 none|none none none
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
73f1082158
[Firefox:315 hits: 06-18 to 07-14]
b5919931fe
[Firefox:123 hits: 06-20 to 07-14]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 03:26:28 23:34:12 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
2ef2f78792
[Firefox: 7 hits: 06-21 to 07-13]
b7a332eb7c
[Firefox: 7 hits: 06-21 to 07-13]		 2ef2f78792 [1]
none [4]		 WinXP 30 of 33 18:25:40 18:25:40 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
2ca2e34968
NEW
61f8a55907
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 23:30:49 23:30:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1d73d779df
NEW		 none[none] WinXP 14 of 32 13:42:33 13:42:33 1 none none:none
 none|none none none
73f1082158
[Firefox:315 hits: 06-18 to 07-14]
cf298ee908
NEW		 73f1082158 [1]
none [none]		 Win2K-f 30 of 33 07:01:08 07:01:08 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
1a2c0e6130
[Firefox:483 hits: 12-31 to 07-14]		 048df78048 [0] WinXP 29 of 29 13:58:05 13:58:05 1 none ASM:Graph
 none|none 100% lines=61 trace
7a393628ea
[Firefox: 6 hits: 05-12 to 07-12]		 none[4] WinXP 30 of 32 11:29:33 11:29:33 1 none none:none
 ASProtect| none trace
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
a08f3b74a4
[Firefox:212 hits: 06-18 to 07-14]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:34:15 22:43:04 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
0fb0a0ba76
NEW		 none[none] Win2K-f 31 of 33 02:06:31 02:06:31 1 none none:none
 none|none none none
68cac0810a
NEW		 none[none] WinXP 30 of 33 06:41:12 06:41:12 1 none none:none
 none|none none none
cd43f33285
NEW		 none[none] WinXP 32 of 33 16:26:13 16:26:13 1 none none:none
 none|none none none
8870f527fa
NEW		 none[none] WinXP 21 of 33 19:46:40 19:46:40 1 none none:none
 none|none none none
607b60ad51
[Firefox: 7 hits: 06-20 to 07-13]
e5c7bce70e
[Firefox: 7 hits: 06-20 to 07-13]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 00:33:30 00:33:30 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
56a3822608
NEW		 none[none] WinXP 31 of 33 01:35:37 01:35:37 1 none none:none
 none|none none none
56a3822608
NEW
a4c433c5d3
NEW		 none[none]
none [none]		 WinXP 28 of 33 01:35:37 01:35:37 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:15 hits: 06-18 to 07-14]
76ee340669
[Firefox:15 hits: 06-18 to 07-14]		 16874933ea [1]
none [4]		 WinXP
Win2K-f		 33 of 33 03:39:07 22:32:50 3 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
07fabc79ef
[Firefox: 7 hits: 06-19 to 07-13]		 07fabc79ef [1] Win2K-f 0 of 32 04:23:43 04:24:59 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
4c3df24b32
[Firefox:87 hits: 06-17 to 07-14]
6a4845ca11
[Firefox: 5 hits: 06-27 to 07-09]		 4c3df24b32 [1]
none [none]		 WinXP 0 of 0 08:07:45 08:07:45 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
3101b958d3
NEW
df17a625ee
[Firefox:487 hits: 05-04 to 07-14]		 none[none]
9bbdd086c5[0]		 WinXP 29 of 29 09:11:34 09:11:34 1 none none:none
ASM:Graph
 none|none
ASPack|		 49% none
lines=186
embedded dns		 none
trace
6c36e19037
[Firefox:12 hits: 06-22 to 07-12]		 none[4] Win2K-f 27 of 32 18:30:17 18:30:17 1 none none:none
 none|none none trace
23c32fbd78
[Firefox: 8 hits: 05-03 to 07-13]		 none[4] WinXP 16 of 31 05:49:36 05:49:36 1 none none:none
 PeCompact| none trace
f12583a6d2
[Firefox:90 hits: 07-13 to 07-14]		 none[none] Win2K-f
WinXP		 20 of 32 01:21:44 16:51:27 7 none none:none
 none|none none none
dc1cd61891
NEW		 none[none] WinXP 31 of 33 21:17:16 21:17:16 1 none none:none
 none|none none none
48f8b1a711
[Firefox: 6 hits: 06-19 to 07-08]		 none[4] WinXP 31 of 33 10:26:59 10:26:59 1 none none:none
 PolyEnE| none trace
c1a25369a4
NEW		 none[none] WinXP 30 of 33 02:55:29 02:55:29 1 none none:none
 none|none none none
16874933ea
[Firefox:15 hits: 06-18 to 07-14]		 16874933ea [1] WinXP
Win2K-f		 29 of 33 03:39:07 22:32:50 3 none ASM:Graph
 Armadillo| 48% lines=82 trace
5126de19b5
[Firefox: 3 hits: 06-27 to 07-11]		 none[none] WinXP 29 of 33 04:33:07 04:33:07 1 none none:none
 none|none none none
53bfe15e91
[Firefox:654 hits: 06-17 to 07-14]
73f1082158
[Firefox:315 hits: 06-18 to 07-14]
e07c29c4ae
[Firefox:97 hits: 06-19 to 07-14]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 08:07:45 18:56:03 3 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
23b2288763
NEW		 none[none] Win2K-f 30 of 33 10:06:37 10:06:37 1 none none:none
 none|none none none
378a4bac36
NEW		 none[none] Win2K-f 30 of 33 08:09:52 08:09:52 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1417 hits: 12-31 to 07-14]		 1aad8e4632 [0] WinXP 25 of 25 12:45:31 15:13:03 2 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
89953ae602
NEW		 none[none] WinXP 22 of 33 02:30:10 02:30:10 1 none none:none
 none|none none none
48f8b1a711
[Firefox: 6 hits: 06-19 to 07-08]
aecf2a5fc9
[Firefox: 4 hits: 06-19 to 06-30]		 none[4]
aecf2a5fc9[1]		 WinXP 1 of 33 10:26:59 10:26:59 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
1ef970bc07
NEW
905e570ec5
NEW		 none[none]
none [none]		 WinXP 29 of 33 11:59:57 11:59:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
dc20b6fe59
[Firefox: 6 hits: 06-23 to 07-11]		 dc20b6fe59 [1] Win2K-f 0 of 0 16:06:35 16:06:35 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
dc20b6fe59
[Firefox: 6 hits: 06-23 to 07-11]
f97070ef2b
[Firefox: 6 hits: 06-23 to 07-11]		 dc20b6fe59 [1]
none [4]		 Win2K-f 0 of 0 16:06:35 16:06:35 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:3203 hits: 12-31 to 07-14]		 7a70e1b592 [0] WinXP 26 of 28 16:35:59 16:35:59 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
1ef970bc07
NEW		 none[none] WinXP 31 of 33 11:59:57 11:59:57 1 none none:none
 none|none none none
68cac0810a
NEW
dee14ccd21
NEW		 none[none]
none [none]		 WinXP 29 of 33 06:41:12 06:41:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1509c8d024
[Firefox: 7 hits: 06-17 to 07-07]		 none[4] Win2K-f 31 of 33 21:47:45 21:47:45 1 none none:none
 tElock| none trace
607b60ad51
[Firefox: 7 hits: 06-20 to 07-13]		 none[4] WinXP 31 of 32 00:33:30 00:33:30 1 none none:none
 tElock| none trace
2ef2f78792
[Firefox: 7 hits: 06-21 to 07-13]		 2ef2f78792 [1] WinXP 29 of 33 18:25:40 18:25:40 1 none ASM:Graph
 Armadillo| 48% lines=82 trace