Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


20 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
73f1082158
[Firefox:370 hits: 06-18 to 07-19]
ae38085a44
NEW		 73f1082158 [1]
none [none]		 WinXP 15 of 33 07:17:43 07:17:43 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
53bfe15e91
[Firefox:767 hits: 06-17 to 07-19]
73f1082158
[Firefox:370 hits: 06-18 to 07-19]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 01:17:23 19:01:19 14 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f6ea12654
[Firefox: 4 hits: 07-13 to 07-15]		 none[none] WinXP 32 of 33 11:23:46 11:24:52 2 none none:none
 none|none none none
53bfe15e91
[Firefox:767 hits: 06-17 to 07-19]		 none[4] Win2K-f
WinXP		 33 of 33 00:50:51 22:02:17 18 none none:none
 tElock| none trace
145421a65e
NEW		 none[none] Win2K-f 32 of 33 05:35:54 05:35:54 1 none none:none
 none|none none none
b7082104e4
[Firefox:52 hits: 06-18 to 07-19]		 none[4] Win2K-f
WinXP		 8 of 33 07:43:23 15:45:59 2 none none:none
 tElock| none trace
8e4e9c46a1
[Firefox: 2 hits: 07-13 to 07-17]		 none[none] WinXP 33 of 33 07:48:40 07:48:40 1 none none:none
 none|none none none
5c089fe241
NEW		 none[none] WinXP 32 of 33 09:02:17 09:02:17 1 none none:none
 none|none none none
2e04b06527
[Firefox: 2 hits: 06-18 to 07-04]
5c054291de
[Firefox: 2 hits: 06-18 to 07-04]		 none[4]
5c054291de[1]		 WinXP 30 of 33 02:32:38 02:32:38 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3f5ec58a6b
[Firefox:32 hits: 04-24 to 07-03]		 4a77430a59 [0] WinXP 30 of 32 11:12:15 11:12:52 2 none ASM:Graph
 PolyEnE| 99% lines=70 trace
a12cab51ef
[Firefox:1124 hits: 05-01 to 07-18]		 40f7f463c4 [0] WinXP 29 of 29 10:50:24 22:59:38 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f502585714
[Firefox:95 hits: 05-03 to 07-19]		 ae590430c5 [0] WinXP 29 of 29 13:31:20 18:59:06 3 none ASM:Graph
 PolyEnE| 100% lines=63 trace
074325ecbc
[Firefox: 2 hits: 07-02 to 07-02]		 none[none] Win2K-f 24 of 33 10:45:02 10:45:02 1 none none:none
 none|none none none
743e51a884
[Firefox: 6 hits: 07-01 to 07-18]		 none[none] WinXP 31 of 31 05:03:37 05:03:37 1 none none:none
 none|none none none
03f912899b
[Firefox:48 hits: 12-14 to 07-17]		 83893bd25d [0] WinXP 32 of 32 01:16:01 23:13:00 4 none ASM:Graph
 none|none 100% lines=65 trace
9d571adc3c
[Firefox: 3 hits: 07-04 to 07-09]
a704164588
[Firefox: 5 hits: 07-04 to 07-14]		 none[none]
none [none]		 Win2K-f 31 of 33 08:19:49 08:19:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
488d27fe97
NEW		 none[none] WinXP 32 of 32 03:05:10 03:05:10 1 none none:none
 none|none none none
7fdfe363d5
[Firefox:3027 hits: 12-31 to 07-19]		 10862ea8b8 [0] Win2K-f
WinXP		 25 of 28 00:37:04 23:31:36 25 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:101 hits: 06-17 to 07-19]		 4c3df24b32 [1] Win2K-f 0 of 33 00:50:51 04:21:30 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
741e3b03b3
[Firefox:176 hits: 09-28 to 07-19]		 e0197e8a64 [0] WinXP 31 of 32 07:36:31 23:47:45 6 none ASM:Graph
 none|none 100% lines=62 trace
990dab20ec
NEW		 none[none] Win2K-f 29 of 33 19:17:52 19:17:52 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:717 hits: 07-11 to 07-19]		 eb7546c600 [0] WinXP 29 of 29 01:27:10 18:08:06 6 none ASM:Graph
 none|none 100% lines=61 trace
a12cab51ef
[Firefox:1124 hits: 05-01 to 07-18]
a1a5487948
NEW		 40f7f463c4 [0]
none [none]		 WinXP 0 of 33 14:28:40 14:28:40 1 none ASM:Graph
none:none
 ASPack|
none|none		 lines=281
embedded dns
none		 trace
none
4c3df24b32
[Firefox:101 hits: 06-17 to 07-19]
53bfe15e91
[Firefox:767 hits: 06-17 to 07-19]
b5919931fe
[Firefox:138 hits: 06-20 to 07-19]		 4c3df24b32 [1]
none [4]
b5919931fe[1]		 Win2K-f 0 of 32 04:21:30 04:21:30 1 none ASM:Graph
none:none
ASM:Graph
 Armadillo|
tElock|
ASProtect|		 48% lines=81
none
lines=90		 trace
trace
trace
3dffacd270
[Firefox: 3 hits: 06-20 to 07-08]
d5bf17f14e
[Firefox: 3 hits: 06-20 to 07-08]		 3dffacd270 [1]
none [4]		 WinXP 30 of 32 22:38:59 22:38:59 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
57ce4acac2
[Firefox:63 hits: 06-17 to 07-17]		 57ce4acac2 [1] Win2K-f 0 of 33 01:48:27 13:20:36 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
1a2c0e6130
[Firefox:490 hits: 12-31 to 07-17]		 048df78048 [0] WinXP 29 of 29 10:53:47 20:50:51 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:767 hits: 06-17 to 07-19]
a08f3b74a4
[Firefox:251 hits: 06-18 to 07-19]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 08:53:14 20:54:09 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a483ba8aa1
[Firefox: 8 hits: 07-09 to 07-19]		 none[none] WinXP 33 of 33 01:20:57 01:20:57 1 none none:none
 none|none none none
5601dcf617
[Firefox: 3 hits: 07-11 to 07-14]
d0c1f3c8c7
[Firefox: 3 hits: 07-11 to 07-14]		 none[none]
none [none]		 WinXP 30 of 32 19:35:27 19:35:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8354fa612f
[Firefox: 4 hits: 06-30 to 07-19]		 none[none] Win2K-f 30 of 32 19:42:31 19:42:31 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:452 hits: 05-02 to 07-17]		 d9e9662db1 [0] WinXP 29 of 29 13:29:13 13:29:13 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
c1688c66a4
NEW		 none[none] WinXP 29 of 33 12:43:16 12:43:16 1 none none:none
 none|none none none
abb7f9922d
NEW
e504dcb886
NEW		 none[none]
none [none]		 WinXP 28 of 33 20:06:07 20:06:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a75955033
[Firefox: 8 hits: 06-20 to 07-11]
9276c8b36b
[Firefox: 8 hits: 06-20 to 07-11]		 none[4]
9276c8b36b[1]		 Win2K-f 28 of 32 21:26:34 21:26:34 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3c8ada1df2
NEW
b8ba472d64
NEW		 none[none]
none [none]		 WinXP 29 of 33 02:48:58 02:48:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
986b59708d
[Firefox:305 hits: 05-03 to 07-17]		 8a00217866 [0] WinXP 29 of 29 13:07:05 14:18:05 2 none ASM:Graph
 PolyEnE| 100% lines=57 trace
b94a769a67
NEW		 none[none] WinXP 32 of 33 03:37:46 03:37:46 1 none none:none
 none|none none none
1eabea0858
NEW		 none[none] Win2K-f 30 of 33 05:31:56 19:54:02 2 none none:none
 none|none none none
9cbcea2c02
NEW		 none[none] Win2K-f 30 of 33 22:58:25 22:58:25 1 none none:none
 none|none none none
3c8ada1df2
NEW		 none[none] WinXP 30 of 33 02:48:58 02:48:58 1 none none:none
 none|none none none
deef244df5
NEW		 none[none] Win2K-f
WinXP		 31 of 33 10:02:15 10:20:26 2 none none:none
 none|none none none
8a75955033
[Firefox: 8 hits: 06-20 to 07-11]		 none[4] Win2K-f 29 of 32 21:26:34 21:26:34 1 none none:none
 tElock| none trace
3cd7958258
[Firefox: 8 hits: 06-17 to 07-18]		 none[4] WinXP 30 of 33 22:42:12 22:42:12 1 none none:none
 tElock| none trace
074325ecbc
[Firefox: 2 hits: 07-02 to 07-02]
2a66fc87fa
[Firefox: 2 hits: 07-02 to 07-02]		 none[none]
none [none]		 Win2K-f 32 of 33 10:45:02 10:45:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:767 hits: 06-17 to 07-19]
8020eb2d22
NEW		 none[4]
none [none]		 WinXP 29 of 33 22:02:17 22:02:17 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
8178c88f5e
[Firefox:10 hits: 07-08 to 07-19]		 none[none] WinXP 33 of 33 03:09:12 03:09:18 2 none none:none
 none|none none none
7f60162c2c
[Firefox:1425 hits: 12-31 to 07-19]		 1aad8e4632 [0] WinXP 25 of 25 09:38:33 19:49:28 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
57ce4acac2
[Firefox:63 hits: 06-17 to 07-17]
83f26f5044
[Firefox: 9 hits: 06-20 to 07-16]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 13:20:36 13:20:36 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
5601dcf617
[Firefox: 3 hits: 07-11 to 07-14]		 none[none] WinXP 30 of 33 19:35:27 19:35:27 1 none none:none
 none|none none none
ea096a2bdf
[Firefox: 7 hits: 07-12 to 07-18]		 none[none] WinXP 31 of 32 06:31:24 06:31:24 1 none none:none
 none|none none none
3cd7958258
[Firefox: 8 hits: 06-17 to 07-18]
41efedf70f
[Firefox: 7 hits: 06-19 to 07-18]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 22:42:12 22:42:12 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
48a8b58d74
NEW		 none[none] Win2K-f 30 of 33 04:35:02 04:35:02 1 none none:none
 none|none none none
5c089fe241
NEW
6aff15795d
NEW		 none[none]
none [none]		 WinXP 29 of 33 09:02:17 09:02:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
abb7f9922d
NEW		 none[none] WinXP 31 of 33 20:06:07 20:06:07 1 none none:none
 none|none none none
3ae357d17b
[Firefox:739 hits: 05-01 to 07-18]		 462a7be171 [0] WinXP 29 of 29 18:33:53 18:33:53 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
dc20b6fe59
[Firefox: 7 hits: 06-23 to 07-15]		 dc20b6fe59 [1] Win2K-f 0 of 0 03:01:06 03:01:06 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
dc20b6fe59
[Firefox: 7 hits: 06-23 to 07-15]
f97070ef2b
[Firefox: 7 hits: 06-23 to 07-15]		 dc20b6fe59 [1]
none [4]		 Win2K-f 0 of 0 03:01:06 03:01:06 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:3217 hits: 12-31 to 07-19]		 7a70e1b592 [0] WinXP 26 of 28 14:05:25 19:44:01 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
366148f7b7
[Firefox: 8 hits: 07-06 to 07-17]		 none[none] WinXP 31 of 33 18:00:32 18:00:32 1 none none:none
 none|none none none
9d571adc3c
[Firefox: 3 hits: 07-04 to 07-09]		 none[none] Win2K-f 31 of 33 08:19:49 08:19:49 1 none none:none
 none|none none none
3605e1c1fb
NEW		 none[none] WinXP 33 of 33 06:23:27 06:23:27 1 none none:none
 none|none none none
511dcda8ce
[Firefox: 2 hits: 07-16 to 07-17]		 none[none] WinXP 32 of 33 04:40:20 04:40:20 1 none none:none
 none|none none none
e3d90a3753
NEW		 none[none] Win2K-f 32 of 33 00:52:24 00:52:24 1 none none:none
 none|none none none
f9c8449e01
NEW		 none[none] Win2K-f 31 of 33 19:34:09 19:34:09 1 none none:none
 none|none none none
b2876f631c
NEW		 none[none] WinXP 30 of 33 15:02:03 15:02:03 1 none none:none
 none|none none none
8aaa5621ab
NEW		 none[none] WinXP 32 of 33 07:37:53 07:37:53 1 none none:none
 none|none none none
2e04b06527
[Firefox: 2 hits: 06-18 to 07-04]		 none[4] WinXP 30 of 33 02:32:38 02:32:38 1 none none:none
 tElock| none trace
3dffacd270
[Firefox: 3 hits: 06-20 to 07-08]		 3dffacd270 [1] WinXP 28 of 32 22:38:59 22:38:59 1 none ASM:Graph
 Armadillo| 47% lines=82 trace