Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


27 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
e759d2b517
[Firefox: 4 hits: 06-21 to 07-02]		 none[4] WinXP 29 of 32 03:59:13 03:59:13 1 none none:none
 PolyEnE| none trace
e33940cb85
NEW		 none[none] WinXP 33 of 34 12:17:22 12:17:22 1 none none:none
 none|none none none
53bfe15e91
[Firefox:946 hits: 06-17 to 07-26]
73f1082158
[Firefox:471 hits: 06-18 to 07-26]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:13:14 22:51:17 21 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
23b2288763
NEW
ef8dc9850c
NEW		 none[none]
none [none]		 Win2K-f 31 of 33 20:05:19 20:05:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f6ea12654
[Firefox: 7 hits: 07-13 to 07-25]		 none[none] WinXP 32 of 33 09:27:50 09:27:50 1 none none:none
 none|none none none
53bfe15e91
[Firefox:946 hits: 06-17 to 07-26]		 none[4] WinXP
Win2K-f		 33 of 33 00:13:14 22:51:17 29 none none:none
 tElock| none trace
509b3029f8
[Firefox: 2 hits: 07-25 to 07-25]		 none[none] WinXP 35 of 35 02:00:37 02:00:37 1 none none:none
 none|none none none
4c3df24b32
[Firefox:117 hits: 06-17 to 07-26]
8390780c27
[Firefox:25 hits: 06-18 to 07-26]		 4c3df24b32 [1]
none [4]		 Win2K-f 30 of 32 04:32:37 07:07:25 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
1509c8d024
[Firefox:11 hits: 06-17 to 07-25]
bd3f6e4ea3
[Firefox: 4 hits: 07-07 to 07-25]		 none[4]
none [none]		 Win2K-f 31 of 33 22:56:53 22:56:53 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:71 hits: 06-17 to 07-26]		 none[4] Win2K-f 31 of 33 21:07:37 21:49:58 2 none none:none
 tElock| none trace
07e8575141
NEW		 none[none] Win2K-f 30 of 32 10:09:17 10:09:17 1 none none:none
 none|none none none
e8558d5eae
NEW		 none[none] WinXP 33 of 35 17:25:32 17:25:32 1 none none:none
 none|none none none
533d15b5ce
[Firefox: 9 hits: 06-21 to 07-23]		 none[4] WinXP 30 of 33 06:06:27 06:06:27 1 none none:none
 tElock| none trace
a12cab51ef
[Firefox:1137 hits: 05-01 to 07-26]		 40f7f463c4 [0] WinXP 29 of 29 05:08:30 17:34:05 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
66aff298fe
NEW		 none[none] Win2K-f 32 of 35 01:26:56 03:04:18 2 none none:none
 none|none none none
03f912899b
[Firefox:59 hits: 12-14 to 07-26]		 83893bd25d [0] WinXP 32 of 32 00:52:22 07:41:44 2 none ASM:Graph
 none|none 100% lines=65 trace
4c3df24b32
[Firefox:117 hits: 06-17 to 07-26]		 4c3df24b32 [1] Win2K-f 0 of 33 04:32:37 07:07:25 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
686d4ca67b
NEW
b7e379b157
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 19:01:45 19:01:45 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
24d9bb993f
NEW
474312616d
NEW
62376cb971
NEW
f82e1a0066
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP
Win2K-f		 13 of 35 10:02:08 19:10:01 2 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
168aab35a3
[Firefox:71 hits: 06-17 to 07-26]
667f0c59f3
[Firefox: 6 hits: 07-04 to 07-24]		 none[4]
none [none]		 Win2K-f 31 of 33 21:07:37 21:07:37 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
6d86a1ff5a
[Firefox:22 hits: 06-25 to 07-26]		 none[none] WinXP 28 of 33 23:51:06 23:51:06 1 none none:none
 none|none none none
741e3b03b3
[Firefox:215 hits: 09-28 to 07-26]		 e0197e8a64 [0] WinXP 31 of 32 02:33:57 18:46:00 8 none ASM:Graph
 none|none 100% lines=62 trace
6d86a1ff5a
[Firefox:22 hits: 06-25 to 07-26]
7f6e032fc0
[Firefox:22 hits: 06-25 to 07-26]		 none[none]
none [none]		 WinXP 31 of 33 23:51:06 23:51:06 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
831f4ee0a7
[Firefox:746 hits: 07-11 to 07-26]		 eb7546c600 [0] WinXP 29 of 29 02:15:11 18:01:49 3 none ASM:Graph
 none|none 100% lines=61 trace
533d15b5ce
[Firefox: 9 hits: 06-21 to 07-23]
58c343a8d8
[Firefox:10 hits: 06-21 to 07-23]		 none[4]
58c343a8d8[1]		 WinXP 28 of 33 06:06:27 06:06:27 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
53bfe15e91
[Firefox:946 hits: 06-17 to 07-26]
692f0b6760
NEW		 none[4]
none [none]		 Win2K-f 29 of 35 00:13:36 00:13:36 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
9a91743938
[Firefox: 4 hits: 07-03 to 07-26]		 none[none] Win2K-f 29 of 33 15:42:28 15:42:28 1 none none:none
 none|none none none
53bfe15e91
[Firefox:946 hits: 06-17 to 07-26]
73f1082158
[Firefox:471 hits: 06-18 to 07-26]
b5919931fe
[Firefox:156 hits: 06-20 to 07-26]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 02:24:31 14:32:55 3 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
93385541f3
[Firefox:17 hits: 06-22 to 07-26]		 none[4] WinXP 32 of 32 06:13:43 06:13:43 1 none none:none
 none|none none trace
57ce4acac2
[Firefox:81 hits: 06-17 to 07-26]		 57ce4acac2 [1] Win2K-f 0 of 33 09:28:35 09:28:35 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
07ad6afc45
NEW		 none[none] WinXP
Win2K-f		 32 of 34 09:53:00 09:53:11 2 none none:none
 none|none none none
1a2c0e6130
[Firefox:505 hits: 12-31 to 07-25]		 048df78048 [0] WinXP 29 of 29 23:39:03 23:39:03 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:946 hits: 06-17 to 07-26]
a08f3b74a4
[Firefox:306 hits: 06-18 to 07-26]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:44:35 19:03:45 8 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7377a34aeb
NEW		 none[none] WinXP
Win2K-f		 25 of 35 23:17:53 23:18:13 2 none none:none
 none|none none none
a483ba8aa1
[Firefox:11 hits: 07-09 to 07-23]		 none[none] WinXP 33 of 33 22:15:37 22:15:37 1 none none:none
 none|none none none
017226a316
NEW		 none[none] Win2K-f 33 of 35 13:36:04 13:36:04 1 none none:none
 none|none none none
d0a6e01449
NEW		 none[none] WinXP 33 of 34 12:10:39 12:10:39 1 none none:none
 none|none none none
4de42f8aea
NEW		 none[none] Win2K-f 30 of 32 14:29:13 14:29:13 1 none none:none
 none|none none none
686d4ca67b
NEW		 none[none] Win2K-f 32 of 33 19:01:45 19:01:45 1 none none:none
 none|none none none
017226a316
NEW
9b03689ec5
NEW		 none[none]
none [none]		 Win2K-f 30 of 35 13:36:04 13:36:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:71 hits: 06-17 to 07-26]
f7738e7352
NEW		 none[4]
none [none]		 Win2K-f 33 of 35 21:49:58 21:49:58 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
8a75955033
[Firefox:11 hits: 06-20 to 07-25]
9276c8b36b
[Firefox:11 hits: 06-20 to 07-25]		 none[4]
9276c8b36b[1]		 WinXP 28 of 32 21:59:35 21:59:35 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
ed67210b9b
NEW		 none[none] WinXP 35 of 35 04:32:33 13:25:17 2 none none:none
 none|none none none
3373948767
[Firefox:10 hits: 07-03 to 07-21]
c73f738c30
[Firefox:10 hits: 07-03 to 07-21]		 none[none]
none [none]		 Win2K-f 29 of 33 17:04:15 17:04:15 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
df17a625ee
[Firefox:498 hits: 05-04 to 07-25]		 9bbdd086c5 [0] WinXP 29 of 29 22:48:37 22:48:37 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
24d9bb993f
NEW
474312616d
NEW
62376cb971
NEW		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 8 of 35 10:02:08 19:10:01 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
24d9bb993f
NEW
474312616d
NEW		 none[none]
none [none]		 WinXP
Win2K-f		 16 of 35 10:02:08 19:10:01 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
917f99560a
[Firefox: 3 hits: 07-22 to 07-22]		 none[none] WinXP 34 of 34 10:56:14 10:56:14 1 none none:none
 none|none none none
1c19adfbb5
NEW		 none[none] WinXP 32 of 34 10:02:08 10:02:08 1 none none:none
 none|none none none
24d9bb993f
NEW		 none[none] Win2K-f 34 of 35 19:10:01 19:10:01 1 none none:none
 none|none none none
382279b44f
[Firefox:27 hits: 05-22 to 07-26]		 049e62d55b [0] Win2K-f
WinXP		 19 of 32 06:11:34 23:57:08 8 none ASM:Graph
 Armadillo| 50% lines=192 trace
23b2288763
NEW		 none[none] Win2K-f 30 of 33 20:05:19 20:05:19 1 none none:none
 none|none none none
8a75955033
[Firefox:11 hits: 06-20 to 07-25]		 none[4] WinXP 29 of 32 21:59:35 21:59:35 1 none none:none
 tElock| none trace
a40ec6f7e3
[Firefox: 2 hits: 07-26 to 07-26]		 none[none] WinXP 34 of 35 13:55:17 13:55:17 1 none none:none
 none|none none none
57ce4acac2
[Firefox:81 hits: 06-17 to 07-26]
83f26f5044
[Firefox:16 hits: 06-20 to 07-26]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 09:28:35 09:28:35 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f60162c2c
[Firefox:1447 hits: 12-31 to 07-26]		 1aad8e4632 [0] WinXP 25 of 25 05:10:18 17:15:16 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
1d569ef2a7
NEW		 none[none] Win2K-f 33 of 35 00:18:36 00:18:36 1 none none:none
 none|none none none
49f8b27cca
NEW
e414dccc52
NEW		 49f8b27cca [1]
none [4]		 Win2K-f 31 of 33 01:11:11 01:11:11 1 none ASM:Graph
none:none
 Armadillo|
ASProtect|		 lines=82
none		 trace
trace
ea096a2bdf
[Firefox:11 hits: 07-12 to 07-23]		 none[none] WinXP 31 of 32 13:57:02 13:57:02 1 none none:none
 none|none none none
3373948767
[Firefox:10 hits: 07-03 to 07-21]		 none[none] Win2K-f 30 of 33 17:04:15 17:04:15 1 none none:none
 none|none none none
dc20b6fe59
[Firefox: 8 hits: 06-23 to 07-20]		 dc20b6fe59 [1] Win2K-f 0 of 0 19:05:40 19:05:40 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7d99b0e910
[Firefox:3268 hits: 12-31 to 07-26]		 7a70e1b592 [0] WinXP 26 of 28 01:04:19 22:59:30 10 none ASM:Graph
 PolyEnE| 99% lines=68 trace
dc20b6fe59
[Firefox: 8 hits: 06-23 to 07-20]
f97070ef2b
[Firefox: 8 hits: 06-23 to 07-20]		 dc20b6fe59 [1]
none [4]		 Win2K-f 0 of 0 19:05:40 19:05:40 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=81
none		 trace
trace
7934c03d62
NEW		 none[none] WinXP 21 of 35 21:30:53 21:30:53 1 none none:none
 none|none none none
49f8b27cca
NEW		 49f8b27cca [1] Win2K-f 29 of 33 01:11:11 01:11:11 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
89c318e39d
NEW		 none[none] WinXP 34 of 35 19:07:34 19:07:34 1 none none:none
 none|none none none
4c171459ff
NEW		 none[none] WinXP 33 of 34 09:41:51 09:41:51 1 none none:none
 none|none none none
1509c8d024
[Firefox:11 hits: 06-17 to 07-25]		 none[4] Win2K-f 31 of 33 22:56:53 22:56:53 1 none none:none
 tElock| none trace
1d569ef2a7
NEW
58408136a4
[Firefox: 6 hits: 06-28 to 07-18]		 none[none]
none [none]		 Win2K-f 32 of 33 00:18:36 00:18:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
73f1082158
[Firefox:471 hits: 06-18 to 07-26]
9d677c3f70
[Firefox: 3 hits: 06-20 to 07-26]		 73f1082158 [1]
none [4]		 WinXP 29 of 32 00:21:28 00:21:28 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace