Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


21 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
7b76c8788a
NEW
e0aeccbffb
NEW		 none[none]
none [none]		 Win2K-f 31 of 34 15:54:56 15:54:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7b76c8788a
NEW		 none[none] Win2K-f 30 of 34 15:54:56 15:54:56 1 none none:none
 none|none none none
3909702c20
NEW		 none[none] WinXP 33 of 34 03:00:52 03:02:20 2 none none:none
 none|none none none
53bfe15e91
[Firefox:785 hits: 06-17 to 07-20]
73f1082158
[Firefox:384 hits: 06-18 to 07-20]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 01:26:31 23:34:31 19 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
405fa70966
NEW		 none[none] Win2K-f 31 of 33 13:05:42 13:05:42 1 none none:none
 none|none none none
53bfe15e91
[Firefox:785 hits: 06-17 to 07-20]		 none[4] WinXP
Win2K-f		 33 of 33 01:21:17 23:34:31 30 none none:none
 tElock| none trace
d01b5333e5
NEW		 none[none] WinXP 33 of 33 16:24:27 16:24:35 2 none none:none
 none|none none none
a37b9e0cf5
NEW		 none[none] WinXP 34 of 34 15:51:48 15:51:48 1 none none:none
 none|none none none
b402048f34
NEW		 none[none] WinXP 27 of 33 16:59:06 16:59:06 1 none none:none
 none|none none none
d70e9267fe
[Firefox: 4 hits: 06-24 to 07-11]		 none[4] WinXP 31 of 33 13:40:58 13:40:58 1 none none:none
 PolyEnE| none trace
4c3df24b32
[Firefox:103 hits: 06-17 to 07-20]
8390780c27
[Firefox:20 hits: 06-18 to 07-17]		 4c3df24b32 [1]
none [4]		 WinXP 30 of 32 03:26:19 03:26:19 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
23ecbe92ad
[Firefox: 5 hits: 05-16 to 11-04]		 none[none] WinXP 26 of 28 14:27:21 14:27:21 1 none none:none
 none|none none none
168aab35a3
[Firefox:60 hits: 06-17 to 07-19]		 none[4] WinXP 31 of 33 05:33:12 05:33:12 1 none none:none
 tElock| none trace
bca9e0fb5f
[Firefox:13 hits: 06-18 to 07-14]		 none[4] Win2K-f 31 of 32 22:32:20 22:32:20 1 none none:none
 PolyEnE| none trace
a12cab51ef
[Firefox:1127 hits: 05-01 to 07-20]		 40f7f463c4 [0] WinXP 29 of 29 12:47:22 19:09:46 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
7452c8448d
[Firefox: 5 hits: 06-17 to 07-18]		 none[4] WinXP 30 of 32 10:29:45 10:29:45 1 none none:none
 PolyEnE| none trace
074325ecbc
[Firefox: 3 hits: 07-02 to 07-20]		 none[none] WinXP 24 of 33 09:54:17 09:54:17 1 none none:none
 none|none none none
2aa59ba425
[Firefox:45 hits: 06-30 to 07-19]		 2aa59ba425 [1] Win2K-f 28 of 30 07:26:36 07:26:36 1 none ASM:Graph
 ASPack| lines=10 trace
03f912899b
[Firefox:52 hits: 12-14 to 07-20]		 83893bd25d [0] WinXP 32 of 32 09:34:38 18:06:53 2 none ASM:Graph
 none|none 100% lines=65 trace
06f27eb5cb
[Firefox: 3 hits: 07-02 to 07-19]		 none[none] Win2K-f 28 of 33 00:31:40 00:31:40 1 none none:none
 none|none none none
cce9566ceb
[Firefox:31 hits: 06-12 to 07-16]		 none[4] WinXP 31 of 32 10:43:20 10:43:20 1 none none:none
 PolyEnE| none trace
47f551924a
[Firefox: 2 hits: 07-12 to 07-12]		 none[none] WinXP 31 of 33 12:11:55 12:11:55 1 none none:none
 none|none none none
7fdfe363d5
[Firefox:3052 hits: 12-31 to 07-20]		 10862ea8b8 [0] WinXP
Win2K-f		 25 of 28 00:48:23 04:06:30 4 none ASM:Graph
 FSG| 95% lines=1933
embedded dns		 trace
4c3df24b32
[Firefox:103 hits: 06-17 to 07-20]		 4c3df24b32 [1] WinXP 0 of 33 01:21:17 03:26:19 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
c7ca96a1e8
NEW		 none[none] WinXP 33 of 34 08:40:31 08:40:31 1 none none:none
 none|none none none
3ed16ae12d
[Firefox: 6 hits: 06-19 to 07-18]		 3ed16ae12d [1] Win2K-f 3 of 33 21:43:50 21:43:50 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
3472ccadd0
NEW		 none[none] WinXP 33 of 34 13:03:06 13:03:06 1 none none:none
 none|none none none
c00daf0998
NEW
e7354030cc
NEW		 none[none]
none [none]		 Win2K-f 30 of 34 00:07:53 00:07:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d86a1ff5a
[Firefox:16 hits: 06-25 to 07-19]		 none[none] WinXP 28 of 33 12:43:18 12:43:18 1 none none:none
 none|none none none
47f551924a
[Firefox: 2 hits: 07-12 to 07-12]
9eb51ec623
[Firefox: 2 hits: 07-12 to 07-12]		 none[none]
none [none]		 WinXP 29 of 33 12:11:55 12:11:55 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
741e3b03b3
[Firefox:182 hits: 09-28 to 07-20]		 e0197e8a64 [0] WinXP 31 of 32 02:29:38 17:30:38 7 none ASM:Graph
 none|none 100% lines=62 trace
2cbc7d5b01
NEW
6f6cb71d85
NEW		 none[none]
none [none]		 Win2K-f 32 of 34 20:40:07 20:40:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d86a1ff5a
[Firefox:16 hits: 06-25 to 07-19]
7f6e032fc0
[Firefox:16 hits: 06-25 to 07-19]		 none[none]
none [none]		 WinXP 31 of 33 12:43:18 12:43:18 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a1a5fa95b9
NEW		 none[4] WinXP 29 of 32 01:15:47 01:15:47 1 none none:none
 tElock| none trace
831f4ee0a7
[Firefox:723 hits: 07-11 to 07-20]		 eb7546c600 [0] WinXP 29 of 29 01:24:03 05:41:07 5 none ASM:Graph
 none|none 100% lines=61 trace
3373948767
[Firefox: 8 hits: 07-03 to 07-19]
b5919931fe
[Firefox:139 hits: 06-20 to 07-20]		 none[none]
b5919931fe[1]		 Win2K-f 0 of 32 12:31:01 22:55:03 3 none none:none
ASM:Graph
 none|none
ASProtect|		 48% none
lines=90		 none
trace
57ce4acac2
[Firefox:65 hits: 06-17 to 07-20]		 57ce4acac2 [1] Win2K-f
WinXP		 0 of 33 11:52:01 16:23:58 3 none ASM:Graph
 Armadillo| 47% lines=81 trace
1a2c0e6130
[Firefox:492 hits: 12-31 to 07-20]		 048df78048 [0] WinXP 29 of 29 04:56:14 22:20:18 2 none ASM:Graph
 none|none 100% lines=61 trace
6f630e7aa2
NEW
a08f3b74a4
[Firefox:254 hits: 06-18 to 07-20]		 none[none]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 09:58:51 21:58:27 11 none none:none
ASM:Graph
 none|none
Armadillo|		 47% none
lines=81		 none
trace
5601dcf617
[Firefox: 4 hits: 07-11 to 07-20]
d0c1f3c8c7
[Firefox: 4 hits: 07-11 to 07-20]		 none[none]
none [none]		 Win2K-f 30 of 32 20:23:16 20:23:16 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8354fa612f
[Firefox: 5 hits: 06-30 to 07-20]		 none[none] Win2K-f 30 of 32 04:28:52 04:28:52 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:453 hits: 05-02 to 07-20]		 d9e9662db1 [0] WinXP 29 of 29 02:54:33 02:54:33 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
00de373b4a
NEW		 none[none] Win2K-f 32 of 33 14:09:58 14:09:58 1 none none:none
 none|none none none
c00daf0998
NEW		 none[none] Win2K-f 33 of 34 00:07:53 00:07:53 1 none none:none
 none|none none none
3373948767
[Firefox: 8 hits: 07-03 to 07-19]
b5919931fe
[Firefox:139 hits: 06-20 to 07-20]
c73f738c30
[Firefox: 8 hits: 07-03 to 07-19]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 29 of 33 19:58:07 22:55:03 2 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
df17a625ee
[Firefox:491 hits: 05-04 to 07-18]		 9bbdd086c5 [0] WinXP 29 of 29 04:22:20 04:22:20 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
39afe3d48a
NEW		 none[none] Win2K-f 31 of 33 06:46:24 06:46:24 1 none none:none
 none|none none none
986b59708d
[Firefox:307 hits: 05-03 to 07-20]		 8a00217866 [0] WinXP 29 of 29 11:26:25 22:17:01 2 none ASM:Graph
 PolyEnE| 100% lines=57 trace
0ada72d805
[Firefox:30 hits: 05-17 to 05-08]		 239ec78f15 [0] WinXP 29 of 29 13:09:05 18:55:59 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
b12e5dfed0
[Firefox: 3 hits: 06-21 to 07-06]
dc92683d9a
[Firefox: 5 hits: 06-19 to 07-06]		 none[4]
dc92683d9a[1]		 WinXP 29 of 33 12:32:53 12:32:53 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
bca9e0fb5f
[Firefox:13 hits: 06-18 to 07-14]
e53a9ea82e
[Firefox:13 hits: 06-18 to 07-14]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 22:32:20 22:32:20 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
6f630e7aa2
NEW		 none[none] WinXP 31 of 33 21:58:27 21:58:27 1 none none:none
 none|none none none
c85d715351
NEW		 none[none] WinXP 33 of 33 07:50:41 07:50:41 1 none none:none
 none|none none none
b12e5dfed0
[Firefox: 3 hits: 06-21 to 07-06]
dc92683d9a
[Firefox: 5 hits: 06-19 to 07-06]
e07c29c4ae
[Firefox:107 hits: 06-19 to 07-19]		 none[4]
dc92683d9a[1]
e07c29c4ae[1]		 WinXP 0 of 33 03:26:19 12:32:53 2 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=82
lines=92		 trace
trace
trace
ee70435c98
NEW		 none[none] WinXP 32 of 34 08:14:02 08:14:02 1 none none:none
 none|none none none
388ebbc343
NEW		 none[none] WinXP 33 of 34 07:44:27 07:44:27 1 none none:none
 none|none none none
074325ecbc
[Firefox: 3 hits: 07-02 to 07-20]
2a66fc87fa
[Firefox: 3 hits: 07-02 to 07-20]		 none[none]
none [none]		 WinXP 32 of 33 09:54:17 09:54:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5601dcf617
[Firefox: 4 hits: 07-11 to 07-20]		 none[none] Win2K-f 30 of 33 20:23:16 20:23:16 1 none none:none
 none|none none none
7f60162c2c
[Firefox:1430 hits: 12-31 to 07-20]		 1aad8e4632 [0] WinXP 25 of 25 02:04:37 23:09:21 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
57ce4acac2
[Firefox:65 hits: 06-17 to 07-20]
83f26f5044
[Firefox:10 hits: 06-20 to 07-20]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 16:23:58 16:23:58 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
3373948767
[Firefox: 8 hits: 07-03 to 07-19]		 none[none] Win2K-f 30 of 33 19:58:07 22:55:03 2 none none:none
 none|none none none
7452c8448d
[Firefox: 5 hits: 06-17 to 07-18]
fd9b49840f
[Firefox: 4 hits: 06-23 to 07-18]		 none[4]
fd9b49840f[1]		 WinXP 0 of 0 10:29:45 10:29:45 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
b12e5dfed0
[Firefox: 3 hits: 06-21 to 07-06]		 none[4] WinXP 30 of 33 12:32:53 12:32:53 1 none none:none
 tElock| none trace
645aff474e
NEW		 none[none] Win2K-f 2 of 33 11:05:14 11:05:14 1 none none:none
 none|none none none
a1a5fa95b9
NEW
e655846fa1
NEW		 none[4]
e655846fa1[1]		 WinXP 28 of 32 01:15:47 01:15:47 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3ae357d17b
[Firefox:740 hits: 05-01 to 07-20]		 462a7be171 [0] WinXP 29 of 29 16:00:02 16:00:02 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
9928a1e660
[Firefox:22 hits: 10-06 to 07-02]		 28c8dadabf [0] Win2K-f 31 of 32 11:44:30 11:44:30 1 none ASM:Graph
 none|none 99% lines=104
embedded dns		 trace
405fa70966
NEW
dc30cce6f7
NEW		 none[none]
none [none]		 Win2K-f 30 of 34 13:05:42 13:05:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3ed16ae12d
[Firefox: 6 hits: 06-19 to 07-18]
79c01ec060
[Firefox:10 hits: 06-18 to 07-18]		 3ed16ae12d [1]
none [4]		 Win2K-f 33 of 33 21:43:50 21:43:50 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:3219 hits: 12-31 to 07-20]		 7a70e1b592 [0] WinXP 26 of 28 06:00:32 22:54:56 9 none ASM:Graph
 PolyEnE| 99% lines=68 trace
06f27eb5cb
[Firefox: 3 hits: 07-02 to 07-19]
d27dfd506b
[Firefox: 3 hits: 07-02 to 07-19]		 none[none]
none [none]		 Win2K-f 31 of 33 00:31:40 00:31:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
366148f7b7
[Firefox: 9 hits: 07-06 to 07-20]		 none[none] WinXP 31 of 33 03:48:19 03:48:19 1 none none:none
 none|none none none
168aab35a3
[Firefox:60 hits: 06-17 to 07-19]
61426996c3
[Firefox: 5 hits: 06-20 to 07-08]		 none[4]
61426996c3[1]		 WinXP 29 of 32 05:33:12 05:33:12 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
00de373b4a
NEW
b234759ccf
NEW		 none[none]
none [none]		 Win2K-f 24 of 33 14:09:58 14:09:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2cbc7d5b01
NEW		 none[none] Win2K-f 31 of 34 20:40:07 20:40:07 1 none none:none
 none|none none none