Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

24 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

3b2958417b
[Firefox: 3 hits: 07-09 to 07-10] none[none] WinXP 33 of 33 18:32:42 18:32:42 1 none none:none
none|none none none

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
73f1082158
[Firefox:440 hits: 06-18 to 07-23] none[4]
73f1082158[1] Win2K-f
WinXP 0 of 32 01:08:39 23:30:10 11 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

faa2725b80
NEW none[none] WinXP 33 of 33 02:52:05 02:52:05 1 none none:none
none|none none none

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23] none[4] Win2K-f
WinXP 33 of 33 01:08:39 23:30:10 24 none none:none
tElock| none trace

1951eee0cd
NEW
e5e0dbde57
NEW 1951eee0cd [1]
none [4] WinXP 31 of 33 02:45:43 02:45:43 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
b7082104e4
[Firefox:58 hits: 06-18 to 07-23] none[4]
none [4] WinXP 8 of 33 05:12:03 05:12:03 1 none none:none
none:none
tElock|
tElock| none
none trace
trace

4c3df24b32
[Firefox:107 hits: 06-17 to 07-23]
8390780c27
[Firefox:22 hits: 06-18 to 07-23] 4c3df24b32 [1]
none [4] WinXP
Win2K-f 30 of 32 12:54:54 14:35:45 2 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

3791fd8fbc
NEW none[none] WinXP 31 of 35 18:25:10 18:25:10 1 none none:none
none|none none none

23ecbe92ad
[Firefox: 6 hits: 05-16 to 07-21] none[none] WinXP 26 of 28 13:46:44 13:46:44 1 none none:none
none|none none none

1951eee0cd
NEW 1951eee0cd [1] WinXP 27 of 33 02:45:43 02:45:43 1 none ASM:Graph
Armadillo| 47% lines=82 trace

168aab35a3
[Firefox:66 hits: 06-17 to 07-23] none[4] Win2K-f 31 of 33 21:00:57 21:00:57 1 none none:none
tElock| none trace

bca9e0fb5f
[Firefox:14 hits: 06-18 to 07-21] none[4] WinXP 31 of 32 02:10:37 13:54:12 2 none none:none
PolyEnE| none trace

a12cab51ef
[Firefox:1132 hits: 05-01 to 07-23] 40f7f463c4 [0] WinXP 29 of 29 08:42:35 17:04:43 2 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

24acffe86e
[Firefox: 2 hits: 06-18 to 07-08]
a0d83e7d41
[Firefox: 2 hits: 06-18 to 07-08] 24acffe86e [1]
none [4] Win2K-f 30 of 32 07:45:57 07:45:57 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

f502585714
[Firefox:100 hits: 05-03 to 07-23] ae590430c5 [0] WinXP 29 of 29 14:11:39 14:11:39 1 none ASM:Graph
PolyEnE| 100% lines=63 trace

37f41fd8ab
NEW
4864a03a4b
NEW
5ab0a45f63
NEW
7452c8448d
[Firefox: 6 hits: 06-17 to 07-21] none[none]
none [none]
none [none]
none [4] Win2K-f 30 of 32 13:54:22 13:54:22 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
PolyEnE| none
none
none
none none
none
none
trace

03f912899b
[Firefox:56 hits: 12-14 to 07-23] 83893bd25d [0] WinXP 32 of 32 03:18:46 03:18:46 1 none ASM:Graph
none|none 100% lines=65 trace

4c3df24b32
[Firefox:107 hits: 06-17 to 07-23]
dbce870f48
[Firefox: 3 hits: 07-03 to 07-19] 4c3df24b32 [1]
none [none] WinXP 29 of 32 20:21:53 20:21:53 1 none ASM:Graph
none:none
Armadillo|
none|none lines=81
none trace
none

37f41fd8ab
NEW none[none] WinXP
Win2K-f 19 of 35 13:41:56 14:48:35 4 none none:none
none|none none none

365daed0df
NEW
3b664b9043
NEW none[none]
none [none] WinXP 33 of 35 21:43:48 21:43:48 1 none none:none
none:none
none|none
none|none none
none none
none

c7ca96a1e8
NEW none[none] WinXP 33 of 34 10:47:18 10:47:18 1 none none:none
none|none none none

d81fee6185
NEW none[none] WinXP 21 of 35 10:40:49 10:40:49 1 none none:none
none|none none none

4c3df24b32
[Firefox:107 hits: 06-17 to 07-23] 4c3df24b32 [1] WinXP
Win2K-f 0 of 33 07:56:58 21:43:41 4 none ASM:Graph
Armadillo| 47% lines=81 trace

168aab35a3
[Firefox:66 hits: 06-17 to 07-23]
667f0c59f3
[Firefox: 5 hits: 07-04 to 07-23] none[4]
none [none] Win2K-f 31 of 33 21:00:57 21:00:57 1 none none:none
none:none
tElock|
none|none none
none trace
none

3472ccadd0
NEW none[none] WinXP 33 of 34 16:01:51 16:01:51 1 none none:none
none|none none none

741e3b03b3
[Firefox:199 hits: 09-28 to 07-23] e0197e8a64 [0] WinXP 31 of 32 00:31:38 09:15:37 6 none ASM:Graph
none|none 100% lines=62 trace

37f41fd8ab
NEW
4864a03a4b
NEW none[none]
none [none] Win2K-f 31 of 34 13:54:22 13:54:22 1 none none:none
none:none
none|none
none|none none
none none
none

8390780c27
[Firefox:22 hits: 06-18 to 07-23]
af88ae89f8
[Firefox: 3 hits: 06-18 to 07-10] none[4]
af88ae89f8[1] WinXP 31 of 33 12:54:54 12:54:54 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

831f4ee0a7
[Firefox:739 hits: 07-11 to 07-23] eb7546c600 [0] WinXP 29 of 29 01:18:55 06:11:00 2 none ASM:Graph
none|none 100% lines=61 trace

641a2c0d36
NEW none[none] WinXP 34 of 35 19:05:54 19:06:15 2 none none:none
none|none none none

5f78ff609d
[Firefox:1545 hits: 04-27 to 07-23] d4a06bdc3a [0] WinXP 21 of 32 12:14:54 12:14:54 1 none ASM:Graph
none|none 46% lines=4 trace

2a4ec56dfe
[Firefox: 2 hits: 07-10 to 07-18] none[none] Win2K-f 31 of 33 05:00:10 05:00:10 1 none none:none
none|none none none

039e3fa376
NEW
76f2c59ef8
NEW none[none]
none [none] Win2K-f 31 of 35 01:35:40 01:35:40 1 none none:none
none:none
none|none
none|none none
none none
none

557c0e2562
NEW none[none] WinXP 22 of 35 19:35:44 19:35:44 1 none none:none
none|none none none

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
73f1082158
[Firefox:440 hits: 06-18 to 07-23]
b5919931fe
[Firefox:147 hits: 06-20 to 07-23] none[4]
73f1082158[1]
b5919931fe[1] Win2K-f 0 of 32 16:05:19 16:05:19 1 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

93385541f3
[Firefox:14 hits: 06-22 to 07-23] none[4] WinXP 32 of 32 07:56:05 07:56:05 1 none none:none
none|none none trace

f20d2c0b8e
[Firefox: 2 hits: 05-05 to 06-19] none[none] WinXP 29 of 29 13:09:08 13:10:18 2 none none:none
none|none none none

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
57ce4acac2
[Firefox:75 hits: 06-17 to 07-23] none[4]
57ce4acac2[1] Win2K-f 0 of 33 09:04:34 09:04:34 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

de46b3fcc2
NEW none[none] WinXP 34 of 35 09:12:35 16:21:13 2 none none:none
none|none none none

039e3fa376
NEW none[none] Win2K-f 33 of 35 01:35:40 01:35:40 1 none none:none
none|none none none

1a2c0e6130
[Firefox:500 hits: 12-31 to 07-23] 048df78048 [0] WinXP 29 of 29 02:09:06 22:07:50 3 none ASM:Graph
none|none 100% lines=61 trace

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
a08f3b74a4
[Firefox:283 hits: 06-18 to 07-23] none[4]
a08f3b74a4[1] WinXP
Win2K-f 0 of 33 03:45:35 21:11:43 8 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

a41d9d371e
[Firefox: 5 hits: 04-21 to 07-23] c2640d398b [0] WinXP 30 of 32 09:07:02 09:07:02 1 none ASM:Graph
PolyEnE| 99% lines=129 trace

a0139d7ad8
[Firefox:456 hits: 05-02 to 07-23] d9e9662db1 [0] WinXP 29 of 29 19:38:21 19:38:21 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

334c2c5d86
NEW none[none] Win2K-f 31 of 35 10:44:11 10:44:11 1 none none:none
none|none none none

24acffe86e
[Firefox: 2 hits: 06-18 to 07-08] 24acffe86e [1] Win2K-f 29 of 33 07:45:57 07:45:57 1 none ASM:Graph
Armadillo| 48% lines=82 trace

37f41fd8ab
NEW
5ab0a45f63
NEW none[none]
none [none] WinXP
Win2K-f 17 of 35 13:41:56 14:48:35 4 none none:none
none:none
none|none
none|none none
none none
none

37f41fd8ab
NEW
5ab0a45f63
NEW
8a75955033
[Firefox: 9 hits: 06-20 to 07-20]
9276c8b36b
[Firefox: 9 hits: 06-20 to 07-20] none[none]
none [none]
none [4]
9276c8b36b[1] WinXP 28 of 32 13:41:56 13:41:56 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
tElock|
Armadillo| 47% none
none
none
lines=81 none
none
trace
trace

df17a625ee
[Firefox:494 hits: 05-04 to 07-23] 9bbdd086c5 [0] WinXP 29 of 29 06:36:03 17:37:27 3 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

986b59708d
[Firefox:312 hits: 05-03 to 07-23] 8a00217866 [0] WinXP 29 of 29 09:28:00 14:29:30 3 none ASM:Graph
PolyEnE| 100% lines=57 trace

bca9e0fb5f
[Firefox:14 hits: 06-18 to 07-21]
e53a9ea82e
[Firefox:14 hits: 06-18 to 07-21] none[4]
e53a9ea82e[1] WinXP 23 of 33 02:10:37 13:54:12 2 none none:none
ASM:Graph
PolyEnE|
Armadillo| 47% none
lines=81 trace
trace

87bd0a062f
[Firefox: 3 hits: 06-29 to 07-22] none[none] Win2K-f 30 of 33 06:44:59 06:44:59 1 none none:none
none|none none none

53bfe15e91
[Firefox:878 hits: 06-17 to 07-23]
73f1082158
[Firefox:440 hits: 06-18 to 07-23]
e07c29c4ae
[Firefox:115 hits: 06-19 to 07-23] none[4]
73f1082158[1]
e07c29c4ae[1] WinXP 0 of 33 03:45:35 19:15:56 2 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

37f41fd8ab
NEW
5ab0a45f63
NEW
8a75955033
[Firefox: 9 hits: 06-20 to 07-20] none[none]
none [none]
none [4] WinXP 29 of 32 13:41:56 13:41:56 1 none none:none
none:none
none:none
none|none
none|none
tElock| none
none
none none
none
trace

7f60162c2c
[Firefox:1444 hits: 12-31 to 07-23] 1aad8e4632 [0] WinXP 25 of 25 19:34:57 19:34:57 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

365daed0df
NEW none[none] WinXP 30 of 35 21:43:48 21:43:48 1 none none:none
none|none none none

3ae357d17b
[Firefox:742 hits: 05-01 to 07-23] 462a7be171 [0] WinXP 29 of 29 16:15:14 18:32:04 3 none ASM:Graph
PolyEnE| 99% lines=73 trace

78e595756a
NEW none[none] WinXP 34 of 35 03:13:32 03:13:36 2 none none:none
none|none none none

b9cdf4ca69
NEW none[4] Win2K-f 31 of 33 10:04:00 10:04:00 1 none none:none
none|none none trace

3791fd8fbc
NEW
739d080108
NEW none[none]
none [none] WinXP 31 of 35 18:25:10 18:25:10 1 none none:none
none:none
none|none
none|none none
none none
none

7d99b0e910
[Firefox:3241 hits: 12-31 to 07-23] 7a70e1b592 [0] WinXP 26 of 28 07:02:07 19:38:40 8 none ASM:Graph
PolyEnE| 99% lines=68 trace

366148f7b7
[Firefox:12 hits: 07-06 to 07-22] none[none] WinXP 31 of 33 03:01:15 03:01:17 2 none none:none
none|none none none

334c2c5d86
NEW
fe5fa07d4f
NEW none[none]
none [none] Win2K-f 31 of 35 10:44:11 10:44:11 1 none none:none
none:none
none|none
none|none none
none none
none

fd486d7c16
NEW none[none] WinXP 33 of 34 07:04:28 07:04:28 1 none none:none
none|none none none

421ecabb8c
NEW none[none] WinXP 31 of 35 21:04:05 21:04:05 1 none none:none
none|none none none

87bd0a062f
[Firefox: 3 hits: 06-29 to 07-22]
c7d6018f97
[Firefox: 3 hits: 06-29 to 07-22] none[none]
none [none] Win2K-f 31 of 33 06:44:59 06:44:59 1 none none:none
none:none
none|none
none|none none
none none
none

2a4ec56dfe
[Firefox: 2 hits: 07-10 to 07-18]
37de553249
[Firefox: 2 hits: 07-10 to 07-18] none[none]
none [none] Win2K-f 30 of 33 05:00:10 05:00:10 1 none none:none
none:none
none|none
none|none none
none none
none

263f679b96
NEW none[none] WinXP 35 of 35 04:35:14 04:35:14 1 none none:none
none|none none none

d209b321f9
NEW none[none] Win2K-f 34 of 35 21:01:45 21:01:45 1 none none:none
none|none none none