Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



29 July 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
6ec2a8994b
[Firefox: 7 hits: 06-18 to 07-25]
857b781ca9
[Firefox: 6 hits: 06-18 to 07-25]
none[4]
857b781ca9[1]
Win2K-f 29 of 33 23:39:39 23:39:39 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
45e0b2544f
[Firefox: 3 hits: 07-19 to 07-28]
633a67eac3
[Firefox: 3 hits: 07-19 to 07-28]
none[none]
none [none]
Win2K-f 31 of 33 22:32:56 22:32:56 1 none none:none
none:none
none|none
none|none
none
none
none
none
70c31be294
NEW
fead05e431
NEW
none[none]
none [none]
Win2K-f 28 of 35 17:24:33 17:24:33 1 none none:none
none:none
none|none
none|none
none
none
none
none
3b2958417b
[Firefox: 4 hits: 07-09 to 07-24]
none[none] WinXP 33 of 33 19:17:44 19:17:44 1 none none:none
none|none none none
41df05b29e
NEW
none[none] Win2K-f 32 of 35 15:20:03 15:20:03 1 none none:none
none|none none none
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
73f1082158
[Firefox:505 hits: 06-18 to 07-28]
none[4]
73f1082158[1]
WinXP
Win2K-f
0 of 32 04:42:51 23:14:53 9 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
dd04166637
[Firefox: 4 hits: 12-20 to 04-07]
53e80eceeb [0] WinXP 31 of 32 18:52:07 18:52:07 1 none ASM:Graph
MEW| 0% lines=296
embedded dns
trace
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
none[4] WinXP
Win2K-f
33 of 33 04:42:51 23:41:48 19 none none:none
tElock| none trace
d01b5333e5
[Firefox: 3 hits: 07-16 to 07-21]
none[none] WinXP 33 of 33 13:14:37 13:14:37 1 none none:none
none|none none none
55d0af189c
NEW
none[none] WinXP 32 of 32 07:12:47 07:12:47 1 none none:none
none|none none none
17739a55ad
[Firefox:221 hits: 06-27 to 07-28]
none[none] WinXP
Win2K-f
20 of 33 08:35:20 10:04:14 4 none none:none
none|none none none
492957db81
[Firefox:68 hits: 05-01 to 07-28]
064e4d7742 [0] WinXP 29 of 29 08:41:47 08:41:47 1 none ASM:Graph
PolyEnE| 100% lines=69
embedded dns
trace
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
b7082104e4
[Firefox:62 hits: 06-18 to 07-26]
none[4]
none [4]
Win2K-f 8 of 33 23:41:48 23:41:48 1 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
c7fd48a934
NEW
none[none] WinXP
Win2K-f
5 of 32 09:24:34 09:45:22 4 none none:none
none|none none none
8fba02579a
NEW
none[4] Win2K-f
WinXP
29 of 32 11:30:46 17:46:09 4 none none:none
StarForce| none trace
509b3029f8
[Firefox:12 hits: 07-25 to 07-28]
none[none] WinXP 35 of 35 10:50:07 10:50:07 1 none none:none
none|none none none
4c3df24b32
[Firefox:120 hits: 06-17 to 07-28]
8390780c27
[Firefox:28 hits: 06-18 to 07-28]
4c3df24b32 [1]
none [4]
Win2K-f 30 of 32 15:50:54 15:50:54 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
1509c8d024
[Firefox:13 hits: 06-17 to 07-28]
bd3f6e4ea3
[Firefox: 5 hits: 07-07 to 07-27]
none[4]
none [none]
Win2K-f 31 of 33 00:24:58 00:24:58 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
996c9c3a01
[Firefox: 8 hits: 04-03 to 07-06]
4b6453fcf3 [0] Win2K-f 32 of 32 01:28:20 01:28:20 1 none ASM:Graph
MEW| 0% lines=5 trace
1ac39aea6b
[Firefox: 2 hits: 06-28 to 07-19]
7b1de9d82d
[Firefox: 2 hits: 06-28 to 07-19]
820bef376c
[Firefox: 2 hits: 06-28 to 07-19]
none[none]
none [none]
none [none]
Win2K-f 0 of 33 02:26:51 02:26:51 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
9e497b5264
NEW
none[none] Win2K-f 14 of 35 08:22:57 08:22:57 1 none none:none
none|none none none
c7fd48a934
NEW
cd75030ece
NEW
e8d4d8cde1
[Firefox:343 hits: 03-31 to 07-19]
none[none]
none [none]
fda109a6fd[0]
WinXP
Win2K-f
13 of 31 09:24:34 09:45:22 5 none none:none
none:none
ASM:Graph
none|none
none|none
ASProtect|
64% none
none
lines=583
embedded dns
none
none
trace
3f536a670f
NEW
none[none] WinXP 33 of 35 10:50:08 10:50:08 1 none none:none
none|none none none
a94f8fd4c2
NEW
none[none] Win2K-f
WinXP
24 of 35 19:20:31 21:31:00 9 none none:none
none|none none none
474312616d
[Firefox: 3 hits: 07-23 to 07-27]
4f51b7cd6f
[Firefox: 2 hits: 06-25 to 07-02]
none[none]
none [none]
Win2K-f 24 of 32 04:53:04 04:53:04 1 none none:none
none:none
none|none
none|none
none
none
none
none
03f912899b
[Firefox:62 hits: 12-14 to 07-28]
83893bd25d [0] WinXP 32 of 32 00:08:05 20:50:12 5 none ASM:Graph
none|none 100% lines=65 trace
4c3df24b32
[Firefox:120 hits: 06-17 to 07-28]
4c3df24b32 [1] Win2K-f 0 of 33 15:50:54 15:50:54 1 none ASM:Graph
Armadillo| 47% lines=81 trace
60234ab5eb
NEW
none[none] Win2K-f 4 of 35 09:26:49 09:26:49 1 none none:none
none|none none none
474312616d
[Firefox: 3 hits: 07-23 to 07-27]
4f51b7cd6f
[Firefox: 2 hits: 06-25 to 07-02]
62376cb971
[Firefox: 3 hits: 07-23 to 07-27]
f82e1a0066
[Firefox: 3 hits: 07-23 to 07-27]
none[none]
none [none]
none [none]
none [none]
Win2K-f 13 of 35 04:53:04 04:53:04 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
6d86a1ff5a
[Firefox:23 hits: 06-25 to 07-27]
none[none] WinXP 28 of 33 11:24:17 11:24:17 1 none none:none
none|none none none
741e3b03b3
[Firefox:227 hits: 09-28 to 07-28]
e0197e8a64 [0] WinXP 31 of 32 10:31:37 13:10:08 3 none ASM:Graph
none|none 100% lines=62 trace
e286d9e6a9
[Firefox:14 hits: 07-13 to 07-15]
none[none] Win2K-f
WinXP
21 of 33 19:28:57 21:34:00 4 none none:none
none|none none none
0237de298e
NEW
none[none] WinXP 21 of 35 12:01:28 12:01:28 1 none none:none
none|none none none
6d86a1ff5a
[Firefox:23 hits: 06-25 to 07-27]
7f6e032fc0
[Firefox:23 hits: 06-25 to 07-27]
none[none]
none [none]
WinXP 31 of 33 11:24:17 11:24:17 1 none none:none
none:none
none|none
none|none
none
none
none
none
831f4ee0a7
[Firefox:756 hits: 07-11 to 07-28]
eb7546c600 [0] WinXP 29 of 29 05:20:11 20:32:52 4 none ASM:Graph
none|none 100% lines=61 trace
c7fd48a934
NEW
cd75030ece
NEW
none[none]
none [none]
WinXP
Win2K-f
18 of 35 09:24:34 09:45:22 5 none none:none
none:none
none|none
none|none
none
none
none
none
3cd7958258
[Firefox:14 hits: 06-17 to 07-28]
41efedf70f
[Firefox:13 hits: 06-19 to 07-28]
b5919931fe
[Firefox:159 hits: 06-20 to 07-27]
none[4]
41efedf70f[1]
b5919931fe[1]
Win2K-f 0 of 32 11:58:27 11:58:27 1 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect|
48% none
lines=82
lines=90
trace
trace
trace
cd7366f252
[Firefox: 5 hits: 07-28 to 07-28]
d2c26e07fd
[Firefox:152 hits: 06-27 to 07-28]
none[none]
none [none]
WinXP
Win2K-f
10 of 33 08:01:17 08:21:06 3 none none:none
none:none
none|none
none|none
none
none
none
none
de46b3fcc2
[Firefox: 2 hits: 07-24 to 07-24]
none[none] WinXP 34 of 35 17:41:59 17:41:59 1 none none:none
none|none none none
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
57ce4acac2
[Firefox:83 hits: 06-17 to 07-28]
none[4]
57ce4acac2[1]
Win2K-f 0 of 33 05:44:55 05:44:55 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
50649fc087
NEW
none[none] Win2K-f
WinXP
26 of 35 19:59:22 21:24:30 3 none none:none
none|none none none
7660f93420
NEW
none[none] WinXP 35 of 35 14:33:19 14:33:19 1 none none:none
none|none none none
3783c700a9
NEW
none[none] Win2K-f 16 of 35 08:43:59 08:43:59 1 none none:none
none|none none none
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
a08f3b74a4
[Firefox:320 hits: 06-18 to 07-28]
none[4]
a08f3b74a4[1]
WinXP
Win2K-f
0 of 33 06:57:42 21:53:05 10 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
7377a34aeb
[Firefox: 2 hits: 07-27 to 07-27]
none[none] Win2K-f
WinXP
25 of 35 19:23:13 19:42:18 4 none none:none
none|none none none
70c31be294
NEW
none[none] Win2K-f 34 of 35 17:24:33 17:24:33 1 none none:none
none|none none none
9d0029f6d8
NEW
none[none] WinXP 4 of 35 09:24:34 09:25:06 2 none none:none
none|none none none
a12b896387
NEW
none[none] WinXP 33 of 35 21:49:49 21:49:49 1 none none:none
none|none none none
a0139d7ad8
[Firefox:457 hits: 05-02 to 07-24]
d9e9662db1 [0] WinXP 29 of 29 11:31:44 19:10:07 2 none ASM:Graph
PolyEnE| 99% lines=68 trace
330eaa2da2
[Firefox:55 hits: 05-04 to 04-23]
none[3] WinXP 28 of 29 02:45:15 02:45:15 1 none none:none
ASPack| none trace
8ae058b2d0
[Firefox: 7 hits: 05-01 to 07-25]
e6a9383b75 [0] WinXP 30 of 32 14:45:34 14:45:34 1 none ASM:Graph
none|none 97% lines=59 trace
ca15c09536
[Firefox:186 hits: 06-27 to 07-28]
cd7366f252
[Firefox: 5 hits: 07-28 to 07-28]
none[none]
none [none]
WinXP
Win2K-f
20 of 35 08:06:07 10:05:57 4 none none:none
none:none
none|none
none|none
none
none
none
none
b13b669243
NEW
none[none] WinXP 23 of 35 09:17:31 09:17:31 1 none none:none
none|none none none
4a64249404
[Firefox: 2 hits: 06-29 to 06-30]
none[none] Win2K-f 18 of 33 09:21:12 09:21:12 1 none none:none
none|none none none
c7fd48a934
NEW
cd75030ece
NEW
e8d4d8cde1
[Firefox:343 hits: 03-31 to 07-19]
f0c9f4382d
NEW
none[none]
none [none]
fda109a6fd[0]
none [none]
WinXP 10 of 35 09:45:22 09:45:22 1 none none:none
none:none
ASM:Graph
none:none
none|none
none|none
ASProtect|
none|none
none
none
lines=583
embedded dns
none
none
none
trace
none
8b3607bd00
[Firefox: 3 hits: 07-26 to 07-28]
none[none] WinXP 34 of 35 11:11:43 11:11:43 1 none none:none
none|none none none
607b60ad51
[Firefox:10 hits: 06-20 to 07-28]
e5c7bce70e
[Firefox:10 hits: 06-20 to 07-28]
none[4]
e5c7bce70e[1]
Win2K-f 2 of 32 05:42:27 05:42:27 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
16874933ea
[Firefox:23 hits: 06-18 to 07-26]
76ee340669
[Firefox:23 hits: 06-18 to 07-26]
16874933ea [1]
none [4]
Win2K-f 33 of 33 03:06:02 20:27:35 2 none ASM:Graph
none:none
Armadillo|
PolyEnE|
lines=82
none
trace
trace
d175bad0e6
[Firefox:16 hits: 06-08 to 07-12]
dfb15f5463 [0] WinXP 29 of 29 07:00:49 07:00:49 1 none ASM:Graph
tElock| 100% lines=81
embedded dns
trace
a016783b32
NEW
none[none] WinXP 34 of 35 21:20:43 21:20:43 1 none none:none
none|none none none
6ec2a8994b
[Firefox: 7 hits: 06-18 to 07-25]
none[4] Win2K-f 30 of 33 23:39:39 23:39:39 1 none none:none
tElock| none trace
63bb8d0ddf
NEW
f2f692a719
[Firefox: 2 hits: 07-23 to 07-26]
none[none]
none [none]
WinXP 30 of 35 06:02:07 06:02:07 1 none none:none
none:none
none|none
none|none
none
none
none
none
df17a625ee
[Firefox:500 hits: 05-04 to 07-28]
9bbdd086c5 [0] WinXP 29 of 29 06:50:08 20:20:28 4 none ASM:Graph
ASPack| 49% lines=186
embedded dns
trace
5ddf0762e4
NEW
none[none] Win2K-f 31 of 35 00:07:39 00:07:39 1 none none:none
none|none none none
ca15c09536
[Firefox:186 hits: 06-27 to 07-28]
none[none] WinXP 26 of 33 10:05:57 14:25:41 2 none none:none
none|none none none
474312616d
[Firefox: 3 hits: 07-23 to 07-27]
4f51b7cd6f
[Firefox: 2 hits: 06-25 to 07-02]
62376cb971
[Firefox: 3 hits: 07-23 to 07-27]
none[none]
none [none]
none [none]
Win2K-f 8 of 35 04:53:04 04:53:04 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
81ba2b47bd
NEW
none[none] Win2K-f 33 of 35 17:44:46 17:44:46 1 none none:none
none|none none none
f12583a6d2
[Firefox:99 hits: 07-13 to 07-16]
none[none] Win2K-f
WinXP
20 of 32 21:30:55 21:40:57 2 none none:none
none|none none none
1ac39aea6b
[Firefox: 2 hits: 06-28 to 07-19]
none[none] Win2K-f 8 of 33 02:26:51 02:26:51 1 none none:none
none|none none none
917f99560a
[Firefox: 5 hits: 07-22 to 07-28]
none[none] WinXP 34 of 34 18:05:41 18:05:41 1 none none:none
none|none none none
474312616d
[Firefox: 3 hits: 07-23 to 07-27]
none[none] Win2K-f 16 of 35 04:53:04 04:53:04 1 none none:none
none|none none none
0ada72d805
[Firefox:35 hits: 05-17 to 07-22]
239ec78f15 [0] WinXP 29 of 29 08:21:25 08:21:25 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
16874933ea
[Firefox:23 hits: 06-18 to 07-26]
16874933ea [1] Win2K-f 29 of 33 03:06:02 20:27:35 2 none ASM:Graph
Armadillo| 48% lines=82 trace
45e0b2544f
[Firefox: 3 hits: 07-19 to 07-28]
none[none] Win2K-f 31 of 33 22:32:56 22:32:56 1 none none:none
none|none none none
d190f1f6c6
NEW
none[none] Win2K-f 21 of 35 05:50:03 05:51:19 2 none none:none
none|none none none
89d021262b
NEW
none[none] WinXP
Win2K-f
26 of 35 19:21:28 19:43:29 2 none none:none
none|none none none
53bfe15e91
[Firefox:994 hits: 06-17 to 07-28]
73f1082158
[Firefox:505 hits: 06-18 to 07-28]
e07c29c4ae
[Firefox:123 hits: 06-19 to 07-28]
none[4]
73f1082158[1]
e07c29c4ae[1]
WinXP 0 of 33 11:42:45 11:42:45 1 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG|
48% none
lines=81
lines=92
trace
trace
trace
382279b44f
[Firefox:43 hits: 05-22 to 07-28]
049e62d55b [0] Win2K-f
WinXP
19 of 32 00:53:21 14:23:54 7 none ASM:Graph
Armadillo| 50% lines=192 trace
e7a94e9156
[Firefox:13 hits: 02-26 to 04-12]
c49065e906 [0] WinXP 31 of 32 14:47:16 14:47:16 1 none ASM:Graph
PolyEnE| 99% lines=72
embedded dns
trace
3cd7958258
[Firefox:14 hits: 06-17 to 07-28]
none[4] Win2K-f 30 of 33 11:58:27 11:58:27 1 none none:none
tElock| none trace
63bb8d0ddf
NEW
none[none] WinXP 30 of 33 06:02:07 06:02:07 1 none none:none
none|none none none
ba4da2e65e
NEW
none[none] WinXP 33 of 35 08:27:06 08:27:06 1 none none:none
none|none none none
f9a0fc79b3
NEW
none[none] WinXP 34 of 35 09:55:43 09:55:43 1 none none:none
none|none none none
be5d4b567e
NEW
none[none] WinXP 32 of 32 06:40:46 06:40:46 1 none none:none
none|none none none
f3b91cf07b
NEW
none[none] Win2K-f 19 of 35 19:32:41 19:32:41 1 none none:none
none|none none none
7f60162c2c
[Firefox:1452 hits: 12-31 to 07-28]
1aad8e4632 [0] WinXP 25 of 25 12:39:43 23:15:10 2 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
0c803048e4
NEW
none[none] WinXP 35 of 35 12:43:15 12:43:15 1 none none:none
none|none none none
3cd7958258
[Firefox:14 hits: 06-17 to 07-28]
41efedf70f
[Firefox:13 hits: 06-19 to 07-28]
none[4]
41efedf70f[1]
Win2K-f 28 of 32 11:58:27 11:58:27 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=82
trace
trace
034d808c86
NEW
none[none] Win2K-f 18 of 33 08:03:58 08:03:58 1 none none:none
none|none none none
3ae357d17b
[Firefox:750 hits: 05-01 to 07-28]
462a7be171 [0] WinXP 29 of 29 16:17:41 16:17:41 1 none ASM:Graph
PolyEnE| 99% lines=73 trace
001b6f7107
NEW
none[none] WinXP 35 of 35 03:41:20 03:41:20 1 none none:none
none|none none none
92d303a819
NEW
none[none] Win2K-f 17 of 35 19:55:38 19:55:38 1 none none:none
none|none none none
7d99b0e910
[Firefox:3285 hits: 12-31 to 07-28]
7a70e1b592 [0] WinXP 26 of 28 01:46:46 16:17:08 5 none ASM:Graph
PolyEnE| 99% lines=68 trace
08c1ee9daf
NEW
none[none] WinXP 19 of 35 16:13:04 16:13:04 1 none none:none
none|none none none
1ac39aea6b
[Firefox: 2 hits: 06-28 to 07-19]
7b1de9d82d
[Firefox: 2 hits: 06-28 to 07-19]
none[none]
none [none]
Win2K-f 21 of 33 02:26:51 02:26:51 1 none none:none
none:none
none|none
none|none
none
none
none
none
ec3d13cabe
NEW
none[none] Win2K-f 29 of 33 08:33:59 08:33:59 1 none none:none
none|none none none
cbeac58546
NEW
none[none] Win2K-f 33 of 35 09:23:53 09:23:53 1 none none:none
none|none none none
1be9d03a2b
NEW
none[none] WinXP 25 of 35 21:44:18 23:28:19 2 none none:none
none|none none none
1509c8d024
[Firefox:13 hits: 06-17 to 07-28]
none[4] Win2K-f 31 of 33 00:24:58 00:24:58 1 none none:none
tElock| none trace
90a6e15b64
NEW
none[none] WinXP 19 of 35 00:09:51 00:09:51 1 none none:none
none|none none none
607b60ad51
[Firefox:10 hits: 06-20 to 07-28]
none[4] Win2K-f 31 of 32 05:42:27 05:42:27 1 none none:none
tElock| none trace
b612788fb5
NEW
none[none] WinXP 32 of 35 20:52:29 20:52:29 1 none none:none
none|none none none
dae77d66f3
[Firefox: 5 hits: 07-08 to 07-12]
none[none] WinXP 31 of 32 12:37:05 14:08:21 3 none none:none
none|none none none
4da237ece7
NEW
9d677c3f70
[Firefox: 4 hits: 06-20 to 07-27]
none[none]
none [4]
Win2K-f 29 of 32 01:43:55 01:43:55 1 none none:none
none:none
none|none
tElock|
none
none
none
trace
4da237ece7
NEW
none[none] Win2K-f 33 of 35 01:43:55 01:43:55 1 none none:none
none|none none none
1ac39aea6b
[Firefox: 2 hits: 06-28 to 07-19]
7b1de9d82d
[Firefox: 2 hits: 06-28 to 07-19]
820bef376c
[Firefox: 2 hits: 06-28 to 07-19]
d6fbe37100
[Firefox: 2 hits: 06-28 to 07-19]
none[none]
none [none]
none [none]
none [none]
Win2K-f 27 of 33 02:26:51 02:26:51 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
046a656119
NEW
none[none] Win2K-f 32 of 35 09:36:20 09:36:20 1 none none:none
none|none none none
883ebad119
[Firefox: 3 hits: 03-26 to 05-15]
11cb10abde [0] WinXP 31 of 32 22:42:40 22:42:40 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
08106a1056
NEW
none[none] WinXP 28 of 35 08:06:07 08:42:51 2 none none:none
none|none none none