Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


25 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6ec2a8994b
[Firefox: 6 hits: 06-18 to 07-12]
857b781ca9
[Firefox: 5 hits: 06-18 to 07-12]		 none[4]
857b781ca9[1]		 WinXP 29 of 33 05:49:19 05:49:19 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
05ea62612c
[Firefox: 3 hits: 06-18 to 06-21]
3a0107380f
[Firefox: 3 hits: 06-18 to 06-21]		 none[4]
3a0107380f[1]		 Win2K-f 30 of 33 19:45:32 19:45:32 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
73f1082158
[Firefox:451 hits: 06-18 to 07-24]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 11:27:27 23:23:30 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f6ea12654
[Firefox: 6 hits: 07-13 to 07-20]		 none[none] WinXP 32 of 33 23:07:50 23:07:50 1 none none:none
 none|none none none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]		 none[4] Win2K-f
WinXP		 33 of 33 06:42:18 23:43:21 19 none none:none
 tElock| none trace
0bfa79dc19
[Firefox: 2 hits: 07-22 to 07-22]		 none[none] Win2K-f 31 of 33 21:36:28 21:36:28 1 none none:none
 none|none none none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
b7082104e4
[Firefox:59 hits: 06-18 to 07-24]		 none[4]
none [4]		 WinXP 8 of 33 07:04:06 07:04:06 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
509b3029f8
NEW		 none[none] WinXP 35 of 35 08:20:39 08:22:10 2 none none:none
 none|none none none
0a44ba387c
[Firefox: 2 hits: 06-25 to 07-09]
6f88847c49
[Firefox: 2 hits: 06-25 to 07-09]		 none[none]
none [none]		 Win2K-f 29 of 33 05:03:53 05:03:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a93930ea8
[Firefox: 8 hits: 07-06 to 07-17]
bc94f66052
[Firefox: 8 hits: 07-06 to 07-17]		 none[none]
none [none]		 WinXP 32 of 33 08:29:31 08:29:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
09d6505627
NEW		 none[none] WinXP 33 of 35 08:00:07 08:00:07 1 none none:none
 none|none none none
1509c8d024
[Firefox: 9 hits: 06-17 to 07-22]
bd3f6e4ea3
[Firefox: 3 hits: 07-07 to 07-22]		 none[4]
none [none]		 Win2K-f 31 of 33 21:17:59 21:17:59 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:67 hits: 06-17 to 07-24]		 none[4] WinXP 31 of 33 02:18:22 02:18:22 1 none none:none
 tElock| none trace
13045e38b8
NEW		 none[none] WinXP 34 of 35 10:41:03 10:41:03 1 none none:none
 none|none none none
e8558d5eae
NEW		 none[none] WinXP 33 of 35 06:51:03 06:51:03 1 none none:none
 none|none none none
3c6781570e
NEW		 none[none] Win2K-f 28 of 33 14:42:34 14:42:34 1 none none:none
 none|none none none
a12cab51ef
[Firefox:1134 hits: 05-01 to 07-24]		 40f7f463c4 [0] WinXP 29 of 29 13:31:56 22:01:23 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
03f912899b
[Firefox:57 hits: 12-14 to 07-24]		 83893bd25d [0] WinXP 32 of 32 16:52:05 16:52:05 1 none ASM:Graph
 none|none 100% lines=65 trace
f17cd31eda
[Firefox: 2 hits: 07-23 to 07-23]		 none[none] WinXP 35 of 35 21:27:04 21:27:04 1 none none:none
 none|none none none
4c3df24b32
[Firefox:111 hits: 06-17 to 07-24]
dbce870f48
[Firefox: 4 hits: 07-03 to 07-24]		 4c3df24b32 [1]
none [none]		 WinXP 29 of 32 21:15:12 21:15:12 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
a86bdb31d3
NEW		 none[4]
none [none]		 Win2K-f 29 of 33 15:54:05 15:54:05 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
0a44ba387c
[Firefox: 2 hits: 06-25 to 07-09]		 none[none] Win2K-f 32 of 33 05:03:53 05:03:53 1 none none:none
 none|none none none
4c3df24b32
[Firefox:111 hits: 06-17 to 07-24]		 4c3df24b32 [1] WinXP 0 of 33 21:15:12 21:15:12 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
6d86a1ff5a
[Firefox:19 hits: 06-25 to 07-23]		 none[none] WinXP
Win2K-f		 28 of 33 19:49:54 23:56:52 2 none none:none
 none|none none none
5c7c5189af
NEW		 none[none] WinXP 31 of 35 15:41:48 15:41:48 1 none none:none
 none|none none none
741e3b03b3
[Firefox:205 hits: 09-28 to 07-24]		 e0197e8a64 [0] WinXP 31 of 32 06:37:41 15:57:52 5 none ASM:Graph
 none|none 100% lines=62 trace
2949152a24
[Firefox: 3 hits: 07-02 to 07-13]		 none[none] Win2K-f 30 of 32 01:57:53 01:57:53 1 none none:none
 none|none none none
830d47a690
NEW		 none[none] WinXP 35 of 35 03:05:16 03:05:18 2 none none:none
 none|none none none
0bfa79dc19
[Firefox: 2 hits: 07-22 to 07-22]
8dfb3b619f
[Firefox: 2 hits: 07-22 to 07-22]		 none[none]
none [none]		 Win2K-f 29 of 34 21:36:28 21:36:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d86a1ff5a
[Firefox:19 hits: 06-25 to 07-23]
7f6e032fc0
[Firefox:19 hits: 06-25 to 07-23]		 none[none]
none [none]		 WinXP
Win2K-f		 31 of 33 19:49:54 23:56:52 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
831f4ee0a7
[Firefox:741 hits: 07-11 to 07-24]		 eb7546c600 [0] WinXP 29 of 29 06:18:45 19:15:19 2 none ASM:Graph
 none|none 100% lines=61 trace
1dd10fdc90
NEW		 none[none] WinXP 34 of 35 20:33:46 20:33:46 1 none none:none
 none|none none none
5f78ff609d
[Firefox:1546 hits: 04-27 to 07-24]		 d4a06bdc3a [0] Win2K-f
WinXP		 21 of 32 08:30:26 20:24:23 4 none ASM:Graph
 none|none 46% lines=4 trace
4b1e5a8e77
NEW		 none[none] Win2K-f 32 of 33 13:29:31 13:29:31 1 none none:none
 none|none none none
673464b1f5
NEW		 none[none] WinXP 33 of 35 10:35:54 10:35:54 1 none none:none
 none|none none none
8a93930ea8
[Firefox: 8 hits: 07-06 to 07-17]		 none[none] WinXP 24 of 33 08:29:31 08:29:31 1 none none:none
 none|none none none
3c6781570e
NEW
537e4f8dce
NEW
b5919931fe
[Firefox:148 hits: 06-20 to 07-24]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 14:42:34 14:42:34 1 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
4b1e5a8e77
NEW
9a62aaacc0
NEW		 none[none]
none [none]		 Win2K-f 3 of 35 13:29:31 13:29:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
57ce4acac2
[Firefox:76 hits: 06-17 to 07-24]		 none[4]
57ce4acac2[1]		 WinXP
Win2K-f		 0 of 33 00:55:44 23:43:21 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1a2c0e6130
[Firefox:503 hits: 12-31 to 07-24]		 048df78048 [0] WinXP 29 of 29 12:03:45 12:17:22 2 none ASM:Graph
 none|none 100% lines=61 trace
2b6229dbc5
NEW		 none[none] WinXP 32 of 33 23:42:41 23:42:41 1 none none:none
 none|none none none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
a08f3b74a4
[Firefox:291 hits: 06-18 to 07-24]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 14:53:15 23:39:56 8 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
05ea62612c
[Firefox: 3 hits: 06-18 to 06-21]		 none[4] Win2K-f 31 of 33 19:45:32 19:45:32 1 none none:none
 tElock| none trace
5c868e2742
NEW		 none[none] WinXP 34 of 35 12:09:51 12:09:51 1 none none:none
 none|none none none
67f55457b1
NEW
9dd1d118ac
NEW		 none[none]
none [none]		 Win2K-f 31 of 35 21:18:40 21:18:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3c6781570e
NEW
537e4f8dce
NEW		 none[none]
none [none]		 Win2K-f 32 of 33 14:42:34 14:42:34 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9345b57563
[Firefox:16 hits: 12-27 to 06-10]		 none[4] WinXP 9 of 32 09:23:04 09:23:04 1 none none:none
 none|none none trace
145317f5ce
NEW		 none[none] Win2K-f 31 of 35 09:57:13 09:57:13 1 none none:none
 none|none none none
6428ed7419
NEW		 none[none] WinXP 30 of 33 05:17:07 05:17:07 1 none none:none
 none|none none none
5364c612fa
[Firefox: 2 hits: 07-06 to 07-11]		 none[none] Win2K-f 30 of 32 06:42:18 06:42:18 1 none none:none
 none|none none none
8ae058b2d0
[Firefox: 6 hits: 05-01 to 07-16]		 e6a9383b75 [0] WinXP 30 of 32 12:54:00 12:54:00 1 none ASM:Graph
 none|none 97% lines=59 trace
043592e432
NEW		 none[none] WinXP 34 of 35 21:55:13 21:55:13 1 none none:none
 none|none none none
556e761226
NEW		 none[none] WinXP 34 of 35 04:36:00 04:36:24 2 none none:none
 none|none none none
168aab35a3
[Firefox:67 hits: 06-17 to 07-24]
f7738e7352
NEW		 none[4]
none [none]		 WinXP 33 of 35 02:18:22 02:18:22 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
8a75955033
[Firefox:10 hits: 06-20 to 07-24]
9276c8b36b
[Firefox:10 hits: 06-20 to 07-24]		 none[4]
9276c8b36b[1]		 WinXP 28 of 32 09:24:26 09:24:26 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b2bdf3de7c
NEW		 none[none] Win2K-f 22 of 35 09:49:24 09:49:24 1 none none:none
 none|none none none
ed67210b9b
NEW		 none[none] WinXP 35 of 35 08:48:46 08:48:46 1 none none:none
 none|none none none
1c4e5d84b6
NEW		 none[none] Win2K-f 20 of 35 09:20:54 09:20:54 1 none none:none
 none|none none none
6ec2a8994b
[Firefox: 6 hits: 06-18 to 07-12]		 none[4] WinXP 30 of 33 05:49:19 05:49:19 1 none none:none
 tElock| none trace
df17a625ee
[Firefox:497 hits: 05-04 to 07-24]		 9bbdd086c5 [0] WinXP 29 of 29 13:52:23 13:52:23 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
09d6505627
NEW
7b1709ae4c
NEW		 none[none]
none [none]		 WinXP 33 of 35 08:00:07 08:00:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c05385e600
[Firefox:21 hits: 06-24 to 07-10]		 6a383b021d [0] WinXP 29 of 29 00:27:45 00:27:45 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
5c7c5189af
NEW
ec725de4e7
NEW		 none[none]
none [none]		 WinXP 32 of 35 15:41:48 15:41:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8b77aef38c
NEW		 none[none] Win2K-f 32 of 35 01:04:45 01:04:45 1 none none:none
 none|none none none
6f630e7aa2
[Firefox: 2 hits: 06-30 to 07-21]		 none[none] WinXP 31 of 33 21:19:08 21:19:08 1 none none:none
 none|none none none
53bfe15e91
[Firefox:902 hits: 06-17 to 07-24]
a08f3b74a4
[Firefox:291 hits: 06-18 to 07-24]
e07c29c4ae
[Firefox:117 hits: 06-19 to 07-24]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 20:50:47 20:50:47 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
382279b44f
[Firefox: 7 hits: 05-22 to 06-01]		 049e62d55b [0] Win2K-f
WinXP		 19 of 32 03:06:32 22:47:35 13 none ASM:Graph
 Armadillo| 50% lines=192 trace
2949152a24
[Firefox: 3 hits: 07-02 to 07-13]
f1a10a0d85
[Firefox: 3 hits: 07-02 to 07-13]		 none[none]
none [none]		 Win2K-f 30 of 33 01:57:53 01:57:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a75955033
[Firefox:10 hits: 06-20 to 07-24]		 none[4] WinXP 29 of 32 09:24:26 09:24:26 1 none none:none
 tElock| none trace
b4d9dd3a19
NEW		 none[none] Win2K-f 33 of 35 11:44:10 11:44:10 1 none none:none
 none|none none none
a2a036466a
[Firefox:272 hits: 05-05 to 07-23]		 none[4] WinXP 14 of 32 08:02:10 08:02:10 1 none none:none
 none|none none trace
3cd7958258
[Firefox: 9 hits: 06-17 to 07-20]		 none[4] Win2K-f 30 of 33 12:21:37 12:21:37 1 none none:none
 tElock| none trace
53123fadcc
[Firefox:61 hits: 01-26 to 06-25]		 none[4] WinXP 13 of 32 11:01:40 11:01:40 1 none none:none
 none|none none trace
7f60162c2c
[Firefox:1445 hits: 12-31 to 07-24]		 1aad8e4632 [0] WinXP 25 of 25 02:02:52 02:02:52 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
66562ca213
NEW		 none[none] WinXP 34 of 35 19:07:48 19:07:48 1 none none:none
 none|none none none
3cd7958258
[Firefox: 9 hits: 06-17 to 07-20]
41efedf70f
[Firefox: 8 hits: 06-19 to 07-20]		 none[4]
41efedf70f[1]		 Win2K-f 28 of 32 12:21:37 12:21:37 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
67f55457b1
NEW		 none[none] Win2K-f 34 of 35 21:18:40 21:18:40 1 none none:none
 none|none none none
f10855e3e1
NEW
f7f799f818
[Firefox: 2 hits: 06-19 to 07-05]		 f10855e3e1 [1]
none [4]		 Win2K-f 29 of 32 08:06:09 08:06:09 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
6428ed7419
NEW
810cfece01
NEW		 none[none]
none [none]		 WinXP 32 of 33 05:17:07 05:17:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4afb021245
NEW		 none[none] Win2K-f 30 of 35 18:51:46 18:51:46 1 none none:none
 none|none none none
7d99b0e910
[Firefox:3249 hits: 12-31 to 07-24]		 7a70e1b592 [0] WinXP 26 of 28 03:42:53 20:32:06 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ce1cf76342
NEW		 none[none] WinXP 33 of 35 08:23:03 08:23:03 1 none none:none
 none|none none none
366148f7b7
[Firefox:14 hits: 07-06 to 07-24]		 none[none] WinXP 31 of 33 09:00:59 09:00:59 1 none none:none
 none|none none none
1509c8d024
[Firefox: 9 hits: 06-17 to 07-22]
f23b040440
[Firefox: 4 hits: 06-22 to 07-03]		 none[4]
f23b040440[1]		 Win2K-f 30 of 32 11:28:14 11:28:14 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
1509c8d024
[Firefox: 9 hits: 06-17 to 07-22]		 none[4] Win2K-f 31 of 33 11:28:14 21:17:59 2 none none:none
 tElock| none trace
f10855e3e1
NEW		 f10855e3e1 [1] Win2K-f 30 of 33 08:06:09 08:06:09 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
55f1288a7a
NEW		 none[none] WinXP 35 of 35 13:07:26 13:07:26 1 none none:none
 none|none none none