Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


16 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6ec2a8994b
[Firefox:14 hits: 06-18 to 08-11]
857b781ca9
[Firefox:10 hits: 06-18 to 08-11]		 none[4]
857b781ca9[1]		 Win2K-f 29 of 33 02:05:33 02:05:33 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]
73f1082158
[Firefox:734 hits: 06-18 to 08-15]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 01:12:19 21:57:21 20 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
56871fe57c
NEW
78e31db533
[Firefox: 2 hits: 08-13 to 08-15]
9b09258622
[Firefox: 9 hits: 08-05 to 08-15]
c9bc6af5e1
NEW
d5a5e9f7a9
[Firefox: 2 hits: 08-13 to 08-15]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP 18 of 36 12:02:58 12:02:58 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
56871fe57c
NEW		 none[none] WinXP 16 of 36 12:02:58 12:02:58 1 none none:none
 none|none none none
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
37f41fd8ab
[Firefox:83 hits: 07-24 to 08-15]
4c3df24b32
[Firefox:147 hits: 06-17 to 08-15]
5ab0a45f63
[Firefox:101 hits: 07-24 to 08-15]
9bacfaddd9
[Firefox: 3 hits: 08-15 to 08-15]
b5919931fe
[Firefox:320 hits: 06-20 to 08-15]
c5e5182fde
[Firefox: 2 hits: 08-15 to 08-15]		 none[4]
none [none]
4c3df24b32[1]
none [none]
none [none]
b5919931fe[1]
none [none]		 Win2K-f 12 of 36 00:10:57 00:10:57 1 none none:none
none:none
ASM:Graph
none:none
none:none
ASM:Graph
none:none
 tElock|
none|none
Armadillo|
none|none
none|none
ASProtect|
none|none		 none
none
lines=81
none
none
lines=90
none		 trace
none
trace
none
none
trace
none
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]		 none[4] WinXP
Win2K-f		 33 of 33 01:11:31 21:57:21 29 none none:none
 tElock| none trace
1fcc146d70
[Firefox:25 hits: 01-02 to 05-29]		 258fafe892 [0] WinXP 29 of 29 00:41:55 00:42:39 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
17739a55ad
[Firefox:383 hits: 06-27 to 08-15]		 none[none] WinXP 20 of 33 05:11:33 05:11:33 1 none none:none
 none|none none none
56871fe57c
NEW
78e31db533
[Firefox: 2 hits: 08-13 to 08-15]
9b09258622
[Firefox: 9 hits: 08-05 to 08-15]
c9bc6af5e1
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP 35 of 36 12:02:58 12:02:58 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
7f89b38665
[Firefox: 4 hits: 08-02 to 08-13]		 none[none] WinXP 32 of 36 15:39:31 15:39:31 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]
b5919931fe
[Firefox:320 hits: 06-20 to 08-15]
b7082104e4
[Firefox:87 hits: 06-18 to 08-15]		 none[4]
b5919931fe[1]
none [4]		 Win2K-f
WinXP		 8 of 33 07:41:28 20:14:14 4 none none:none
ASM:Graph
none:none
 tElock|
ASProtect|
tElock|		 none
lines=90
none		 trace
trace
trace
7c2b50c774
[Firefox:11 hits: 08-01 to 08-15]		 none[none] Win2K-f 25 of 36 21:05:03 21:05:03 1 none none:none
 none|none none none
2e04b06527
[Firefox: 4 hits: 06-18 to 08-15]
5c054291de
[Firefox: 4 hits: 06-18 to 08-15]		 none[4]
5c054291de[1]		 Win2K-f 30 of 33 06:34:56 06:34:56 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]		 none[4] Win2K-f
WinXP		 31 of 33 00:10:57 22:56:41 5 none none:none
 tElock| none trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
cc53fa213b
NEW		 none[4]
none [none]		 Win2K-f 34 of 36 10:46:12 10:46:12 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
533d15b5ce
[Firefox:15 hits: 06-21 to 08-10]		 none[4] WinXP 30 of 33 21:24:10 21:24:10 1 none none:none
 tElock| none trace
a12cab51ef
[Firefox:468 hits: 01-01 to 08-15]		 40f7f463c4 [0] WinXP 29 of 29 06:32:47 16:47:33 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
1b94c1cc14
[Firefox: 4 hits: 07-01 to 08-11]		 none[none] WinXP 31 of 33 01:53:14 01:53:14 1 none none:none
 none|none none none
56871fe57c
NEW
78e31db533
[Firefox: 2 hits: 08-13 to 08-15]
9b09258622
[Firefox: 9 hits: 08-05 to 08-15]		 none[none]
none [none]
none [none]		 WinXP 14 of 36 12:02:58 12:02:58 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
03f912899b
[Firefox:87 hits: 01-08 to 08-15]		 83893bd25d [0] WinXP 32 of 32 03:21:30 23:43:50 2 none ASM:Graph
 none|none 100% lines=65 trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
37f41fd8ab
[Firefox:83 hits: 07-24 to 08-15]		 none[4]
none [none]		 Win2K-f 19 of 35 00:10:57 00:10:57 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
4c3df24b32
[Firefox:147 hits: 06-17 to 08-15]		 none[4]
4c3df24b32[1]		 Win2K-f
WinXP		 0 of 33 00:10:57 22:56:41 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
667f0c59f3
[Firefox:13 hits: 07-04 to 08-12]		 none[4]
none [none]		 Win2K-f 31 of 33 01:19:51 01:19:51 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
a3d41629ae
NEW		 none[none] WinXP 34 of 35 13:44:31 13:44:31 1 none none:none
 none|none none none
741e3b03b3
[Firefox:278 hits: 01-05 to 08-15]		 e0197e8a64 [0] WinXP 31 of 32 05:02:30 19:40:11 7 none ASM:Graph
 none|none 100% lines=62 trace
9543d041a7
[Firefox: 7 hits: 02-18 to 08-06]		 49e3eed5c5 [0] WinXP 29 of 29 19:20:28 19:20:28 1 none ASM:Graph
 PolyEnE| 100% lines=77
embedded dns		 trace
831f4ee0a7
[Firefox:481 hits: 01-01 to 08-15]		 eb7546c600 [0] WinXP 29 of 29 01:42:11 23:56:55 6 none ASM:Graph
 none|none 100% lines=61 trace
533d15b5ce
[Firefox:15 hits: 06-21 to 08-10]
58c343a8d8
[Firefox:16 hits: 06-21 to 08-10]		 none[4]
58c343a8d8[1]		 WinXP 28 of 33 21:24:10 21:24:10 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
0dbfaa395e
NEW		 none[4] Win2K-f 31 of 32 19:43:32 19:43:32 1 none none:none
 tElock| none trace
4b1e5a8e77
[Firefox: 4 hits: 07-05 to 08-06]		 none[none] Win2K-f 32 of 33 20:36:26 20:36:26 1 none none:none
 none|none none none
a0044bcb25
[Firefox: 4 hits: 08-02 to 08-11]		 none[none] WinXP 36 of 36 09:44:10 09:44:10 1 none none:none
 none|none none none
00de373b4a
[Firefox: 2 hits: 07-12 to 07-21]
b234759ccf
[Firefox: 2 hits: 07-12 to 07-21]
b5919931fe
[Firefox:320 hits: 06-20 to 08-15]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 00:10:57 23:37:23 13 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
4b1e5a8e77
[Firefox: 4 hits: 07-05 to 08-06]
9a62aaacc0
[Firefox: 3 hits: 07-25 to 08-06]		 none[none]
none [none]		 Win2K-f 3 of 35 20:36:26 20:36:26 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]
57ce4acac2
[Firefox:114 hits: 06-17 to 08-15]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 15:09:30 15:09:30 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
17e9dbcb71
NEW		 none[none] WinXP 19 of 36 08:07:31 08:07:31 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:327 hits: 12-31 to 08-15]		 048df78048 [0] WinXP 29 of 29 10:53:57 14:09:40 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]
a08f3b74a4
[Firefox:474 hits: 06-18 to 08-15]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 01:11:31 16:37:59 6 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f89b38665
[Firefox: 4 hits: 08-02 to 08-13]
a51a50404e
[Firefox: 4 hits: 08-02 to 08-13]		 none[none]
none [none]		 WinXP 34 of 36 15:39:31 15:39:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0139d7ad8
[Firefox:86 hits: 01-03 to 08-14]		 d9e9662db1 [0] WinXP 29 of 29 01:19:30 16:59:40 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
9b9e5dcb18
[Firefox: 3 hits: 08-08 to 08-12]		 none[none] WinXP 36 of 36 07:43:07 12:04:02 3 none none:none
 none|none none none
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
37f41fd8ab
[Firefox:83 hits: 07-24 to 08-15]
4c3df24b32
[Firefox:147 hits: 06-17 to 08-15]
5ab0a45f63
[Firefox:101 hits: 07-24 to 08-15]		 none[4]
none [none]
4c3df24b32[1]
none [none]		 Win2K-f 17 of 35 00:10:57 00:10:57 1 none none:none
none:none
ASM:Graph
none:none
 tElock|
none|none
Armadillo|
none|none		 none
none
lines=81
none		 trace
none
trace
none
00de373b4a
[Firefox: 2 hits: 07-12 to 07-21]		 none[none] Win2K-f 32 of 33 23:37:23 23:37:23 1 none none:none
 none|none none none
60355a8247
NEW		 none[none] WinXP 34 of 36 17:37:57 17:37:57 1 none none:none
 none|none none none
56871fe57c
NEW
78e31db533
[Firefox: 2 hits: 08-13 to 08-15]		 none[none]
none [none]		 WinXP 16 of 36 12:02:58 12:02:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:32 hits: 06-18 to 08-14]
76ee340669
[Firefox:33 hits: 06-18 to 08-14]		 16874933ea [1]
none [4]		 WinXP 33 of 33 22:49:09 22:49:09 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
8a75955033
[Firefox:20 hits: 06-20 to 08-15]
9276c8b36b
[Firefox:20 hits: 06-20 to 08-15]		 none[4]
9276c8b36b[1]		 WinXP
Win2K-f		 28 of 32 01:38:28 03:39:45 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
7cebed19c8
NEW		 none[4]
none [none]		 Win2K-f 34 of 36 01:14:31 01:14:31 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
c48fa79359
NEW		 none[none] WinXP 27 of 36 03:44:43 03:44:43 1 none none:none
 none|none none none
6ec2a8994b
[Firefox:14 hits: 06-18 to 08-11]		 none[4] Win2K-f 30 of 33 02:05:33 02:05:33 1 none none:none
 tElock| none trace
df17a625ee
[Firefox:213 hits: 01-01 to 08-14]		 9bbdd086c5 [0] WinXP 29 of 29 06:23:57 06:23:57 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
1d99ba7f96
NEW		 none[none] Win2K-f 32 of 36 13:10:03 13:10:03 1 none none:none
 none|none none none
093d0bd693
NEW
a757d26d4b
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 23:03:52 23:03:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
ca15c09536
[Firefox:525 hits: 06-27 to 08-15]		 none[none] Win2K-f 26 of 33 02:15:40 02:15:40 1 none none:none
 none|none none none
1b94c1cc14
[Firefox: 4 hits: 07-01 to 08-11]
62728ad1cd
[Firefox: 4 hits: 07-01 to 08-11]		 none[none]
none [none]		 WinXP 29 of 33 01:53:14 01:53:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
986b59708d
[Firefox:60 hits: 01-14 to 08-15]		 8a00217866 [0] WinXP 29 of 29 13:09:23 13:09:23 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
de42c45975
[Firefox: 2 hits: 08-12 to 08-13]		 none[none] WinXP 35 of 36 15:57:37 15:57:37 1 none none:none
 none|none none none
48f8b1a711
[Firefox:11 hits: 06-19 to 08-08]		 none[4] Win2K-f 31 of 33 04:49:54 04:49:54 1 none none:none
 PolyEnE| none trace
16874933ea
[Firefox:32 hits: 06-18 to 08-14]		 16874933ea [1] WinXP 29 of 33 22:49:09 22:49:09 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
4113025530
[Firefox: 3 hits: 07-30 to 08-15]		 none[none] WinXP 33 of 35 07:01:33 07:01:33 1 none none:none
 none|none none none
0c5e413f57
NEW		 none[none] WinXP 30 of 33 01:05:19 01:05:19 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1444 hits: 06-17 to 08-15]
73f1082158
[Firefox:734 hits: 06-18 to 08-15]
e07c29c4ae
[Firefox:258 hits: 06-19 to 08-15]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 01:38:28 17:41:57 6 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
8a75955033
[Firefox:20 hits: 06-20 to 08-15]		 none[4] WinXP
Win2K-f		 29 of 32 01:38:28 03:39:45 2 none none:none
 tElock| none trace
4113025530
[Firefox: 3 hits: 07-30 to 08-15]
e3ca792d99
[Firefox: 3 hits: 07-30 to 08-15]		 none[none]
none [none]		 WinXP 32 of 35 07:01:33 07:01:33 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3cd7958258
[Firefox:18 hits: 06-17 to 08-05]		 none[4] Win2K-f 30 of 33 20:01:10 20:01:10 1 none none:none
 tElock| none trace
319dddbd87
[Firefox: 2 hits: 07-13 to 08-13]		 none[none] Win2K-f 31 of 33 04:20:59 04:20:59 1 none none:none
 none|none none none
7f60162c2c
[Firefox:450 hits: 12-31 to 08-15]		 1aad8e4632 [0] WinXP 25 of 25 05:35:50 17:20:26 7 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
168aab35a3
[Firefox:91 hits: 06-17 to 08-15]
37f41fd8ab
[Firefox:83 hits: 07-24 to 08-15]
4c3df24b32
[Firefox:147 hits: 06-17 to 08-15]
5ab0a45f63
[Firefox:101 hits: 07-24 to 08-15]
9bacfaddd9
[Firefox: 3 hits: 08-15 to 08-15]		 none[4]
none [none]
4c3df24b32[1]
none [none]
none [none]		 Win2K-f 26 of 36 00:10:57 00:10:57 1 none none:none
none:none
ASM:Graph
none:none
none:none
 tElock|
none|none
Armadillo|
none|none
none|none		 none
none
lines=81
none
none		 trace
none
trace
none
none
3cd7958258
[Firefox:18 hits: 06-17 to 08-05]
41efedf70f
[Firefox:17 hits: 06-19 to 08-05]		 none[4]
41efedf70f[1]		 Win2K-f 28 of 32 20:01:10 20:01:10 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
c80d0ac3fc
NEW		 none[none] Win2K-f 34 of 36 00:39:43 00:39:43 1 none none:none
 none|none none none
48f8b1a711
[Firefox:11 hits: 06-19 to 08-08]
aecf2a5fc9
[Firefox: 9 hits: 06-19 to 08-08]		 none[4]
aecf2a5fc9[1]		 Win2K-f 1 of 33 04:49:54 04:49:54 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
c996d575d2
NEW		 none[none] WinXP 35 of 36 12:06:32 12:06:32 1 none none:none
 none|none none none
cf83f7cd39
NEW		 none[none] WinXP 21 of 35 13:08:05 13:08:05 1 none none:none
 none|none none none
093d0bd693
NEW		 none[none] Win2K-f 35 of 36 23:03:52 23:03:52 1 none none:none
 none|none none none
7d99b0e910
[Firefox:955 hits: 12-31 to 08-15]		 7a70e1b592 [0] WinXP 26 of 28 08:27:47 20:59:44 9 none ASM:Graph
 PolyEnE| 99% lines=68 trace
089d3e7af7
NEW		 none[none] WinXP 32 of 36 04:46:28 04:46:28 1 none none:none
 none|none none none
0ee77eb7eb
NEW		 none[none] WinXP 34 of 36 14:04:37 14:04:37 1 none none:none
 none|none none none
c21df65e26
NEW		 none[none] WinXP 32 of 32 20:27:50 20:27:50 1 none none:none
 none|none none none
1509c8d024
[Firefox:18 hits: 06-17 to 08-11]
f23b040440
[Firefox: 9 hits: 06-22 to 08-11]		 none[4]
f23b040440[1]		 WinXP 30 of 32 15:24:44 15:24:44 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
00de373b4a
[Firefox: 2 hits: 07-12 to 07-21]
b234759ccf
[Firefox: 2 hits: 07-12 to 07-21]		 none[none]
none [none]		 Win2K-f 24 of 33 23:37:23 23:37:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1509c8d024
[Firefox:18 hits: 06-17 to 08-11]		 none[4] WinXP 31 of 33 15:24:44 15:24:44 1 none none:none
 tElock| none trace
2e04b06527
[Firefox: 4 hits: 06-18 to 08-15]		 none[4] Win2K-f 30 of 33 06:34:56 06:34:56 1 none none:none
 tElock| none trace
4565d1626f
NEW		 none[none] WinXP 36 of 36 16:47:07 16:47:52 2 none none:none
 none|none none none
4c3df24b32
[Firefox:147 hits: 06-17 to 08-15]
58408136a4
[Firefox:11 hits: 06-28 to 08-14]		 4c3df24b32 [1]
none [none]		 Win2K-f 32 of 33 11:05:50 11:05:50 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
d362633fb2
NEW		 none[none] WinXP 0 of 0 20:28:27 20:28:27 1 none none:none
 none|none none none
1d99ba7f96
NEW
7850b9af42
NEW		 none[none]
none [none]		 Win2K-f 34 of 35 13:10:03 13:10:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4442fbf8df
NEW		 none[none] WinXP 34 of 36 05:26:01 05:26:01 1 none none:none
 none|none none none
319dddbd87
[Firefox: 2 hits: 07-13 to 08-13]
b5919931fe
[Firefox:320 hits: 06-20 to 08-15]
bcabcc7cc3
[Firefox: 3 hits: 07-09 to 08-13]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 30 of 33 04:20:59 04:20:59 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none