Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


18 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
c5c8dc364c
NEW		 none[none] WinXP 31 of 33 12:42:24 12:42:24 1 none none:none
 none|none none none
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
c562e2226d
NEW		 none[4]
none [none]		 Win2K-f 1 of 33 21:08:31 21:08:31 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
f685f8e027
[Firefox: 3 hits: 06-18 to 07-11]		 none[4]
f685f8e027[1]		 Win2K-f 28 of 33 11:45:14 11:45:14 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 48% none
lines=82		 trace
trace
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
73f1082158
[Firefox:354 hits: 06-18 to 07-17]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 10:52:18 17:14:17 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]		 none[4] WinXP
Win2K-f		 33 of 33 00:38:44 22:01:31 24 none none:none
 tElock| none trace
55fe9d9ade
[Firefox:51 hits: 05-03 to 06-20]		 4bce6c4887 [0] WinXP 29 of 29 20:35:47 20:35:47 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
87e1117f2a
NEW		 none[none] WinXP 32 of 33 21:25:21 21:25:21 1 none none:none
 none|none none none
7c13c0e82c
NEW		 none[none] WinXP 32 of 33 11:40:00 11:40:00 1 none none:none
 none|none none none
3a601c00ec
NEW		 none[none] WinXP 31 of 33 02:04:10 02:04:10 1 none none:none
 none|none none none
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
b7082104e4
[Firefox:50 hits: 06-18 to 07-17]		 none[4]
none [4]		 Win2K-f 8 of 33 19:01:53 19:01:53 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
4bc07024bd
NEW		 none[none] WinXP 31 of 33 08:23:18 08:23:18 1 none none:none
 none|none none none
a1d26a15e6
NEW		 none[none] WinXP 32 of 32 00:22:22 00:22:22 1 none none:none
 none|none none none
897d59617c
[Firefox:48 hits: 06-28 to 07-01]		 none[none] Win2K-f 25 of 33 07:04:43 07:04:43 1 none none:none
 none|none none none
6686b0fe5f
[Firefox: 3 hits: 06-06 to 07-13]		 none[4] Win2K-f 20 of 32 12:05:38 12:05:38 1 none none:none
 ASProtect| none trace
168aab35a3
[Firefox:57 hits: 06-17 to 07-17]		 none[4] Win2K-f 31 of 33 06:46:00 06:46:00 1 none none:none
 tElock| none trace
fdccf59154
NEW		 none[none] WinXP 32 of 33 13:16:17 13:16:17 1 none none:none
 none|none none none
e8d4d8cde1
[Firefox:326 hits: 03-31 to 07-13]		 fda109a6fd [0] Win2K-f
WinXP		 13 of 31 12:03:00 13:25:49 16 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
d42c1cc7c0
[Firefox:317 hits: 05-01 to 07-15]		 af9ca5bed1 [0] WinXP 29 of 29 23:03:09 23:03:12 2 none ASM:Graph
 PolyEnE| 100% lines=54 trace
c434d8c3a4
NEW		 none[none] Win2K-f 31 of 33 18:53:16 18:53:16 1 none none:none
 none|none none none
a12cab51ef
[Firefox:1122 hits: 05-01 to 07-16]		 40f7f463c4 [0] WinXP 29 of 29 17:30:08 22:11:31 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
cfd6e6801f
NEW		 none[none] WinXP 33 of 33 04:48:49 04:48:49 1 none none:none
 none|none none none
7c13c0e82c
NEW
bd0d82c41c
NEW		 none[none]
none [none]		 WinXP 29 of 33 11:40:00 11:40:00 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7452c8448d
[Firefox: 3 hits: 06-17 to 07-14]		 none[4] Win2K-f
WinXP		 30 of 32 02:30:35 08:58:46 2 none none:none
 PolyEnE| none trace
743e51a884
[Firefox: 3 hits: 07-01 to 07-04]		 none[none] WinXP 31 of 31 15:05:59 16:13:27 3 none none:none
 none|none none none
dd01765c05
NEW		 none[none] WinXP 0 of 33 21:16:40 21:16:40 1 none none:none
 none|none none none
553f34eed3
NEW		 none[none] Win2K-f 30 of 33 09:25:19 09:25:19 1 none none:none
 none|none none none
181239b848
NEW		 none[4] WinXP 31 of 33 04:59:45 04:59:45 1 none none:none
 PolyEnE| none trace
7fdfe363d5
[Firefox:2965 hits: 12-31 to 07-17]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 00:32:49 23:51:48 31 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
168aab35a3
[Firefox:57 hits: 06-17 to 07-17]
4c3df24b32
[Firefox:94 hits: 06-17 to 07-17]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 05:11:57 06:46:00 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3ed16ae12d
[Firefox: 5 hits: 06-19 to 07-11]		 3ed16ae12d [1] Win2K-f 3 of 33 16:08:47 16:08:47 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
b5919931fe
[Firefox:133 hits: 06-20 to 07-17]
dabbc1ee56
NEW		 b5919931fe [1]
none [none]		 Win2K-f 31 of 33 04:29:28 04:29:28 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
741e3b03b3
[Firefox:166 hits: 09-28 to 07-17]		 e0197e8a64 [0] WinXP 31 of 32 01:34:46 16:41:32 5 none ASM:Graph
 none|none 100% lines=62 trace
7057d9d709
NEW		 none[none] Win2K-f 29 of 32 05:05:33 05:05:33 1 none none:none
 none|none none none
1f8cd4c49d
NEW		 none[none] WinXP 9 of 33 23:09:22 23:09:22 1 none none:none
 none|none none none
2a4ec56dfe
NEW		 none[none] Win2K-f 31 of 33 22:40:42 22:40:42 1 none none:none
 none|none none none
2a4ec56dfe
NEW
37de553249
NEW
b5919931fe
[Firefox:133 hits: 06-20 to 07-17]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 04:29:28 22:40:42 3 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
9d9054829c
[Firefox: 2 hits: 06-24 to 07-08]		 none[4] WinXP 31 of 33 16:01:48 16:01:48 1 none none:none
 tElock| none trace
dd98c3c108
[Firefox: 6 hits: 06-24 to 07-11]		 dd98c3c108 [1] Win2K-f 29 of 33 16:20:30 16:20:30 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
382623979d
NEW		 none[none] WinXP 0 of 33 17:30:08 17:30:08 1 none none:none
 none|none none none
59f7ed630c
NEW		 none[none] WinXP 31 of 33 19:41:03 19:41:03 1 none none:none
 none|none none none
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
a08f3b74a4
[Firefox:235 hits: 06-18 to 07-17]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:38:44 22:01:31 14 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
897d59617c
[Firefox:48 hits: 06-28 to 07-01]
89ed8b8186
NEW
a014934a72
[Firefox:72 hits: 06-28 to 07-13]		 none[none]
none [none]
none [none]		 Win2K-f 27 of 33 07:04:43 07:04:43 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
a483ba8aa1
[Firefox: 6 hits: 07-09 to 07-16]		 none[none] WinXP 33 of 33 06:24:47 06:24:47 1 none none:none
 none|none none none
deae225172
NEW		 none[none] Win2K-f 17 of 33 08:58:58 17:05:51 2 none none:none
 none|none none none
4bc07024bd
NEW
b5ab89299f
NEW		 none[none]
none [none]		 WinXP 28 of 33 08:23:18 08:23:18 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
87e1117f2a
NEW
b4fe4581c3
NEW		 none[none]
none [none]		 WinXP 29 of 33 21:25:21 21:25:21 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
dd98c3c108
[Firefox: 6 hits: 06-24 to 07-11]
e98746deb1
[Firefox: 5 hits: 06-24 to 07-06]		 dd98c3c108 [1]
none [4]		 Win2K-f 31 of 33 16:20:30 16:20:30 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
7166c03b99
NEW		 none[none] WinXP 29 of 32 13:59:12 13:59:12 1 none none:none
 none|none none none
897d59617c
[Firefox:48 hits: 06-28 to 07-01]
89ed8b8186
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 07:04:43 07:04:43 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f5e263f1f0
NEW		 none[none] Win2K-f 31 of 33 13:11:46 13:11:46 1 none none:none
 none|none none none
dd01765c05
NEW
df17a625ee
[Firefox:489 hits: 05-04 to 07-16]		 none[none]
9bbdd086c5[0]		 WinXP 29 of 29 07:08:25 21:16:40 2 none none:none
ASM:Graph
 none|none
ASPack|		 49% none
lines=186
embedded dns		 none
trace
57f4ad4c13
NEW
c44c50b48d
NEW		 none[none]
none [none]		 WinXP 31 of 33 01:26:34 01:26:34 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9609fd9311
NEW		 none[none] WinXP 2 of 33 17:29:31 17:29:31 1 none none:none
 none|none none none
b5919931fe
[Firefox:133 hits: 06-20 to 07-17]
dabbc1ee56
NEW
f4f090debc
NEW		 b5919931fe [1]
none [none]
none [none]		 Win2K-f 31 of 33 04:29:28 04:29:28 1 none ASM:Graph
none:none
none:none
 ASProtect|
none|none
none|none		 lines=90
none
none		 trace
none
none
9d9054829c
[Firefox: 2 hits: 06-24 to 07-08]
b69118be9f
[Firefox: 2 hits: 06-24 to 07-08]		 none[4]
b69118be9f[1]		 WinXP 30 of 33 16:01:48 16:01:48 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
c85d715351
NEW		 none[none] WinXP 33 of 33 03:14:20 03:14:20 1 none none:none
 none|none none none
53bfe15e91
[Firefox:729 hits: 06-17 to 07-17]
a08f3b74a4
[Firefox:235 hits: 06-18 to 07-17]
e07c29c4ae
[Firefox:104 hits: 06-19 to 07-17]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 10:52:18 21:48:48 2 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
802ec969fd
NEW		 none[none] Win2K-f 31 of 33 18:38:32 18:38:32 1 none none:none
 none|none none none
6e2eaa0359
[Firefox: 2 hits: 07-10 to 07-12]
740e3bffe0
[Firefox: 3 hits: 06-25 to 07-12]		 none[none]
none [none]		 WinXP 24 of 33 15:21:00 15:21:00 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3b4e3deb2a
NEW		 none[none] WinXP 30 of 33 22:46:55 22:46:55 1 none none:none
 none|none none none
355cabe10f
NEW		 none[4] Win2K-f 31 of 32 06:47:38 06:47:38 1 none none:none
 StarForce| none trace
3cd7958258
[Firefox: 6 hits: 06-17 to 07-10]		 none[4] Win2K-f
WinXP		 30 of 33 20:48:52 20:53:40 2 none none:none
 tElock| none trace
8178c88f5e
[Firefox: 8 hits: 07-08 to 07-17]		 none[none] WinXP 33 of 33 16:05:27 16:05:27 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1421 hits: 12-31 to 07-17]		 1aad8e4632 [0] WinXP 25 of 25 13:12:00 21:52:25 3 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
af34a64bfe
NEW		 none[none] WinXP 24 of 33 13:25:58 13:25:58 1 none none:none
 none|none none none
6e2eaa0359
[Firefox: 2 hits: 07-10 to 07-12]		 none[none] WinXP 31 of 33 15:21:00 15:21:00 1 none none:none
 none|none none none
6d5d299e30
NEW		 none[none] Win2K-f 14 of 33 06:03:01 06:03:01 1 none none:none
 none|none none none
ea096a2bdf
[Firefox: 4 hits: 07-12 to 07-17]		 none[none] WinXP 31 of 32 01:14:54 15:18:50 3 none none:none
 none|none none none
3cd7958258
[Firefox: 6 hits: 06-17 to 07-10]
41efedf70f
[Firefox: 5 hits: 06-19 to 07-10]		 none[4]
41efedf70f[1]		 Win2K-f
WinXP		 28 of 32 20:48:52 20:53:40 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
f0b49cdcfc
NEW		 none[none] WinXP 33 of 33 01:30:35 01:30:40 2 none none:none
 none|none none none
7452c8448d
[Firefox: 3 hits: 06-17 to 07-14]
fd9b49840f
[Firefox: 2 hits: 06-23 to 07-14]		 none[4]
fd9b49840f[1]		 Win2K-f
WinXP		 0 of 0 02:30:35 08:58:46 2 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
3ae357d17b
[Firefox:738 hits: 05-01 to 07-16]		 462a7be171 [0] WinXP 29 of 29 10:16:00 10:16:00 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
1a3a423319
[Firefox: 2 hits: 06-26 to 06-27]		 none[none] WinXP 32 of 33 19:58:58 19:58:58 1 none none:none
 none|none none none
7d99b0e910
[Firefox:3212 hits: 12-31 to 07-17]		 7a70e1b592 [0] WinXP 26 of 28 03:50:50 16:47:25 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
3ed16ae12d
[Firefox: 5 hits: 06-19 to 07-11]
79c01ec060
[Firefox: 9 hits: 06-18 to 07-11]		 3ed16ae12d [1]
none [4]		 Win2K-f 33 of 33 16:08:47 16:08:47 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
1a3a423319
[Firefox: 2 hits: 06-26 to 06-27]
d4c7af762e
[Firefox: 2 hits: 06-26 to 06-27]		 none[none]
none [none]		 WinXP 29 of 33 19:58:58 19:58:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
79d36a1053
NEW		 none[none] Win2K-f 31 of 33 12:01:02 12:01:02 1 none none:none
 none|none none none
57f4ad4c13
NEW		 none[none] WinXP 28 of 33 01:26:34 01:26:34 1 none none:none
 none|none none none
4f881e99c1
NEW		 none[none] WinXP 30 of 33 03:02:58 03:02:58 1 none none:none
 none|none none none
3e0b734da7
NEW		 none[4] Win2K-f 29 of 32 07:51:37 07:51:37 1 none none:none
 FSG| none trace
2a4ec56dfe
NEW
37de553249
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 22:40:42 22:40:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:94 hits: 06-17 to 07-17]
58408136a4
[Firefox: 5 hits: 06-28 to 07-13]		 4c3df24b32 [1]
none [none]		 Win2K-f 32 of 33 05:11:57 05:11:57 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
a92e3f8fc8
[Firefox:118 hits: 05-03 to 07-11]		 dfe02a1e52 [0] WinXP 26 of 28 17:07:54 17:08:20 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
59f7ed630c
NEW
bf3159a5dd
NEW		 none[none]
none [none]		 WinXP 27 of 32 19:41:03 19:41:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
29c516d5db
NEW		 none[none] Win2K-f 29 of 32 16:47:04 16:47:04 1 none none:none
 none|none none none