Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


28 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
45e0b2544f
NEW
633a67eac3
NEW		 none[none]
none [none]		 WinXP 31 of 33 09:20:36 10:23:45 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:975 hits: 06-17 to 07-27]
73f1082158
[Firefox:492 hits: 06-18 to 07-27]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 07:54:18 23:00:42 13 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f6ea12654
[Firefox: 8 hits: 07-13 to 07-27]		 none[none] WinXP 32 of 33 03:44:51 19:26:23 2 none none:none
 none|none none none
53bfe15e91
[Firefox:975 hits: 06-17 to 07-27]		 none[4] WinXP
Win2K-f		 33 of 33 00:24:27 23:01:01 19 none none:none
 tElock| none trace
6bf9acfa77
NEW		 none[none] WinXP 30 of 33 06:51:17 06:51:17 1 none none:none
 none|none none none
55fe9d9ade
[Firefox:53 hits: 05-03 to 07-26]		 4bce6c4887 [0] WinXP 29 of 29 17:44:50 19:37:04 2 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
17739a55ad
[Firefox:218 hits: 06-27 to 07-02]		 none[none] WinXP
Win2K-f		 20 of 33 05:09:59 06:56:39 3 none none:none
 none|none none none
492957db81
[Firefox:67 hits: 05-01 to 07-19]		 064e4d7742 [0] WinXP 29 of 29 18:52:23 18:52:23 1 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
509b3029f8
[Firefox: 3 hits: 07-25 to 07-27]		 none[none] WinXP 35 of 35 06:04:57 21:09:06 9 none none:none
 none|none none none
8390780c27
[Firefox:27 hits: 06-18 to 07-27]		 none[4] Win2K-f 30 of 32 10:24:18 10:24:18 1 none none:none
 tElock| none trace
8a93930ea8
[Firefox: 9 hits: 07-06 to 07-25]
bc94f66052
[Firefox: 9 hits: 07-06 to 07-25]		 none[none]
none [none]		 Win2K-f 32 of 33 05:58:19 05:58:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0c6268b411
NEW		 none[none] Win2K-f 33 of 35 19:59:42 19:59:42 1 none none:none
 none|none none none
168aab35a3
[Firefox:73 hits: 06-17 to 07-27]		 none[4] WinXP 31 of 33 08:49:17 18:55:20 2 none none:none
 tElock| none trace
d42c1cc7c0
[Firefox:322 hits: 05-01 to 07-26]		 af9ca5bed1 [0] WinXP 29 of 29 10:42:15 10:42:15 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
a12cab51ef
[Firefox:1140 hits: 05-01 to 07-27]		 40f7f463c4 [0] WinXP 29 of 29 06:51:02 19:38:05 4 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
24acffe86e
[Firefox: 3 hits: 06-18 to 07-24]
a0d83e7d41
[Firefox: 3 hits: 06-18 to 07-24]		 24acffe86e [1]
none [4]		 WinXP 30 of 32 00:44:13 00:44:13 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
269df8493a
NEW		 none[none] Win2K-f 32 of 35 04:59:45 04:59:45 1 none none:none
 none|none none none
03f912899b
[Firefox:61 hits: 12-14 to 07-27]		 83893bd25d [0] WinXP 32 of 32 03:29:51 03:29:51 1 none ASM:Graph
 none|none 100% lines=65 trace
12c513d41d
NEW		 none[none] Win2K-f 33 of 35 08:08:50 08:08:50 1 none none:none
 none|none none none
cd7366f252
NEW
de9c878632
NEW		 none[none]
none [none]		 Win2K-f 22 of 35 04:49:23 04:49:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c718f0d24
[Firefox: 2 hits: 06-29 to 06-30]		 none[none] Win2K-f 30 of 33 05:06:50 05:06:50 1 none none:none
 none|none none none
8390780c27
[Firefox:27 hits: 06-18 to 07-27]
940475f291
NEW		 none[4]
none [none]		 Win2K-f 33 of 35 10:24:18 10:24:18 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:73 hits: 06-17 to 07-27]
4c3df24b32
[Firefox:119 hits: 06-17 to 07-27]		 none[4]
4c3df24b32[1]		 WinXP 0 of 33 08:49:17 08:49:17 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
741e3b03b3
[Firefox:223 hits: 09-28 to 07-27]		 e0197e8a64 [0] WinXP 31 of 32 05:56:25 16:57:41 4 none ASM:Graph
 none|none 100% lines=62 trace
0a0261b96a
[Firefox: 9 hits: 07-16 to 07-19]		 none[none] Win2K-f 24 of 29 13:33:14 18:05:01 2 none none:none
 none|none none none
355281ab68
NEW		 none[4] Win2K-f 29 of 32 07:37:29 07:40:37 2 none none:none
 StarForce| none trace
2ef6cd596a
NEW		 none[none] WinXP 23 of 35 23:02:22 23:02:22 1 none none:none
 none|none none none
0b0c6a7b64
NEW		 none[none] WinXP 12 of 33 06:07:59 06:07:59 1 none none:none
 none|none none none
c5d407807f
NEW		 none[4] Win2K-f 29 of 32 19:44:58 19:44:58 1 none none:none
 StarForce| none trace
831f4ee0a7
[Firefox:749 hits: 07-11 to 07-27]		 eb7546c600 [0] WinXP 29 of 29 04:51:30 12:35:34 7 none ASM:Graph
 none|none 100% lines=61 trace
0c6268b411
NEW
524cd7fe92
NEW		 none[none]
none [none]		 Win2K-f 32 of 35 19:59:42 19:59:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a93930ea8
[Firefox: 9 hits: 07-06 to 07-25]		 none[none] Win2K-f 24 of 33 05:58:19 05:58:19 1 none none:none
 none|none none none
9d9054829c
[Firefox: 4 hits: 06-24 to 07-26]		 none[4] WinXP 31 of 33 17:00:44 17:00:44 1 none none:none
 tElock| none trace
d2c26e07fd
[Firefox:150 hits: 06-27 to 07-02]		 none[none] Win2K-f
WinXP		 10 of 33 06:40:57 07:31:42 2 none none:none
 none|none none none
57ce4acac2
[Firefox:82 hits: 06-17 to 07-27]		 57ce4acac2 [1] Win2K-f 0 of 33 22:09:48 22:09:48 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
0a0261b96a
[Firefox: 9 hits: 07-16 to 07-19]
2f02f5eb03
NEW		 none[none]
none [none]		 Win2K-f 19 of 35 13:33:14 13:33:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1a2c0e6130
[Firefox:506 hits: 12-31 to 07-27]		 048df78048 [0] WinXP 29 of 29 09:00:42 20:43:33 3 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:975 hits: 06-17 to 07-27]
a08f3b74a4
[Firefox:314 hits: 06-18 to 07-27]		 none[4]
a08f3b74a4[1]		 Win2K-f 0 of 33 09:24:58 23:01:01 6 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
706e697ed5
[Firefox: 2 hits: 06-21 to 06-29]		 none[4] WinXP 32 of 33 02:10:26 02:10:26 1 none none:none
 PolyEnE| none trace
53bfe15e91
[Firefox:975 hits: 06-17 to 07-27]
d198a6ea5a
NEW		 none[4]
none [none]		 WinXP 26 of 35 00:24:27 00:24:27 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
24acffe86e
[Firefox: 3 hits: 06-18 to 07-24]		 24acffe86e [1] WinXP 29 of 33 00:44:13 00:44:13 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
2d76ff4e53
[Firefox: 2 hits: 07-23 to 07-26]		 none[none] Win2K-f 34 of 35 11:52:44 11:52:44 1 none none:none
 none|none none none
8b3607bd00
[Firefox: 2 hits: 07-26 to 07-26]		 none[none] WinXP 34 of 35 02:09:07 02:09:07 1 none none:none
 none|none none none
cd7366f252
NEW		 none[none] WinXP
Win2K-f		 20 of 35 04:48:49 06:40:57 5 none none:none
 none|none none none
0d3fafbf29
NEW
d401773a07
NEW		 0d3fafbf29 [1]
none [4]		 WinXP 29 of 33 20:17:54 20:17:54 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
607b60ad51
[Firefox: 9 hits: 06-20 to 07-19]
e5c7bce70e
[Firefox: 9 hits: 06-20 to 07-19]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 14:57:48 14:57:48 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
0d3fafbf29
NEW		 0d3fafbf29 [1] WinXP 28 of 33 20:17:54 20:17:54 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
df17a625ee
[Firefox:499 hits: 05-04 to 07-27]		 9bbdd086c5 [0] WinXP 29 of 29 20:21:26 20:21:26 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
ca15c09536
[Firefox:181 hits: 06-27 to 07-02]		 none[none] Win2K-f
WinXP		 26 of 33 04:45:39 05:46:32 5 none none:none
 none|none none none
cfaeeb74d4
NEW		 none[none] Win2K-f
WinXP		 33 of 35 04:38:53 05:09:28 2 none none:none
 none|none none none
2d6002ac1c
NEW		 none[none] WinXP 35 of 35 01:31:34 01:31:34 1 none none:none
 none|none none none
3199efa07d
NEW		 none[none] WinXP 2 of 35 12:29:17 12:29:17 1 none none:none
 none|none none none
917f99560a
[Firefox: 4 hits: 07-22 to 07-27]		 none[none] WinXP 34 of 34 17:15:21 17:15:21 1 none none:none
 none|none none none
9a32965bc8
[Firefox:11 hits: 06-28 to 07-02]		 none[none] Win2K-f 12 of 33 06:13:28 06:13:28 1 none none:none
 none|none none none
a9c8d121f2
[Firefox: 9 hits: 06-28 to 07-02]		 none[none] WinXP
Win2K-f		 28 of 33 04:48:49 06:05:46 2 none none:none
 none|none none none
9d9054829c
[Firefox: 4 hits: 06-24 to 07-26]
b69118be9f
[Firefox: 4 hits: 06-24 to 07-26]		 none[4]
b69118be9f[1]		 WinXP 30 of 33 17:00:44 17:00:44 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
45e0b2544f
NEW		 none[none] WinXP 31 of 33 09:20:36 10:23:45 2 none none:none
 none|none none none
87bd0a062f
[Firefox: 5 hits: 06-29 to 07-26]		 none[none] Win2K-f 30 of 33 00:17:35 00:17:35 1 none none:none
 none|none none none
53bfe15e91
[Firefox:975 hits: 06-17 to 07-27]
73f1082158
[Firefox:492 hits: 06-18 to 07-27]
e07c29c4ae
[Firefox:121 hits: 06-19 to 07-26]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 17:00:44 19:37:22 2 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
382279b44f
[Firefox:35 hits: 05-22 to 07-27]		 049e62d55b [0] WinXP
Win2K-f		 19 of 32 05:25:09 20:01:53 8 none ASM:Graph
 Armadillo| 50% lines=192 trace
3cd7958258
[Firefox:13 hits: 06-17 to 07-26]		 none[4] WinXP 30 of 33 18:01:43 18:01:43 1 none none:none
 tElock| none trace
a2a036466a
[Firefox:273 hits: 05-05 to 07-25]		 none[4] WinXP 14 of 32 15:13:08 15:13:08 1 none none:none
 none|none none trace
0d0fa96607
[Firefox: 3 hits: 06-27 to 07-01]		 none[none] WinXP 29 of 33 04:48:52 04:48:52 1 none none:none
 none|none none none
57ce4acac2
[Firefox:82 hits: 06-17 to 07-27]
83f26f5044
[Firefox:17 hits: 06-20 to 07-27]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 22:09:48 22:09:48 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f60162c2c
[Firefox:1451 hits: 12-31 to 07-27]		 1aad8e4632 [0] WinXP 25 of 25 17:40:18 17:40:18 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
NEW		 none[none] WinXP 35 of 35 16:55:11 16:55:11 1 none none:none
 none|none none none
3cd7958258
[Firefox:13 hits: 06-17 to 07-26]
41efedf70f
[Firefox:12 hits: 06-19 to 07-26]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 18:01:43 18:01:43 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3ae357d17b
[Firefox:749 hits: 05-01 to 07-26]		 462a7be171 [0] WinXP 29 of 29 15:40:10 15:40:10 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
8acd7e1937
[Firefox: 6 hits: 06-22 to 07-26]
b9cdf4ca69
[Firefox: 3 hits: 06-18 to 07-26]		 8acd7e1937 [1]
none [4]		 WinXP 31 of 33 00:13:50 00:13:50 1 none ASM:Graph
none:none
 none|none
none|none		 lines=0
none		 trace
trace
dc20b6fe59
[Firefox: 9 hits: 06-23 to 07-27]		 dc20b6fe59 [1] WinXP 0 of 0 01:18:15 01:18:15 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
7d99b0e910
[Firefox:3278 hits: 12-31 to 07-27]		 7a70e1b592 [0] WinXP 26 of 28 02:55:48 17:22:06 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
dc20b6fe59
[Firefox: 9 hits: 06-23 to 07-27]
f97070ef2b
[Firefox: 9 hits: 06-23 to 07-27]		 dc20b6fe59 [1]
none [4]		 WinXP 0 of 0 01:18:15 01:18:15 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=81
none		 trace
trace
8acd7e1937
[Firefox: 6 hits: 06-22 to 07-26]		 8acd7e1937 [1] WinXP 29 of 32 00:13:50 00:13:50 1 none ASM:Graph
 none|none 44% lines=0 trace
2d76ff4e53
[Firefox: 2 hits: 07-23 to 07-26]
7df1377ee3
[Firefox: 2 hits: 07-23 to 07-26]		 none[none]
none [none]		 Win2K-f 32 of 35 11:52:44 11:52:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
35085295a6
NEW		 none[none] Win2K-f
WinXP		 22 of 35 11:20:52 20:14:17 4 none none:none
 none|none none none
e3d90a3753
NEW		 none[none] Win2K-f 32 of 33 21:31:41 21:31:41 1 none none:none
 none|none none none
168aab35a3
[Firefox:73 hits: 06-17 to 07-27]
f62373a83b
[Firefox: 2 hits: 07-03 to 07-06]		 none[4]
none [none]		 WinXP 30 of 33 18:55:20 18:55:20 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
aaf4077b09
NEW		 none[none] Win2K-f 20 of 35 21:40:10 21:40:10 1 none none:none
 none|none none none
87bd0a062f
[Firefox: 5 hits: 06-29 to 07-26]
c7d6018f97
[Firefox: 5 hits: 06-29 to 07-26]		 none[none]
none [none]		 Win2K-f 31 of 33 00:17:35 00:17:35 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4138726683
NEW		 none[none] Win2K-f 11 of 35 13:45:45 13:45:45 1 none none:none
 none|none none none
12c513d41d
NEW
1509c8d024
[Firefox:12 hits: 06-17 to 07-27]		 none[none]
none [4]		 Win2K-f 31 of 33 08:08:50 08:08:50 1 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
91e43fc14a
[Firefox: 6 hits: 05-01 to 05-21]		 none[4] WinXP 0 of 0 14:37:54 14:37:54 1 none none:none
 Obsidium| none trace
607b60ad51
[Firefox: 9 hits: 06-20 to 07-19]		 none[4] WinXP 31 of 32 14:57:48 14:57:48 1 none none:none
 tElock| none trace
a92e3f8fc8
[Firefox:120 hits: 05-03 to 07-18]		 dfe02a1e52 [0] WinXP 26 of 28 07:24:08 07:25:12 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
55f1288a7a
NEW		 none[none] WinXP 35 of 35 17:21:35 17:21:35 1 none none:none
 none|none none none