Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


17 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
b5919931fe
[Firefox:333 hits: 06-20 to 08-16]
da00a8e7a1
[Firefox: 6 hits: 08-05 to 08-15]
f685f8e027
[Firefox:10 hits: 06-18 to 08-15]		 b5919931fe [1]
none [none]
f685f8e027[1]		 Win2K-f 28 of 33 06:25:00 06:25:00 1 none ASM:Graph
none:none
ASM:Graph
 ASProtect|
none|none
Armadillo|		 48% lines=90
none
lines=82		 trace
none
trace
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]
73f1082158
[Firefox:754 hits: 06-18 to 08-16]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 01:00:02 21:19:31 15 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
378a4bac36
[Firefox: 7 hits: 07-01 to 08-09]
d11b4c2e19
[Firefox: 7 hits: 07-01 to 08-09]		 none[none]
none [none]		 WinXP 29 of 33 20:08:37 20:08:37 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
23b2288763
[Firefox: 2 hits: 07-15 to 07-27]
ef8dc9850c
[Firefox: 2 hits: 07-15 to 07-27]		 none[none]
none [none]		 Win2K-f 31 of 33 00:13:52 00:13:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
ba4637f8f0
[Firefox: 3 hits: 07-01 to 07-30]
c5e5182fde
[Firefox: 3 hits: 08-15 to 08-16]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP
Win2K-f		 12 of 36 11:06:39 11:30:53 3 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
1fcc146d70
[Firefox:27 hits: 01-02 to 08-16]		 258fafe892 [0] WinXP 29 of 29 17:53:13 17:53:13 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]		 none[4] WinXP
Win2K-f		 33 of 33 00:43:59 23:47:35 39 none none:none
 tElock| none trace
2c85520f75
NEW		 none[none] Win2K-f 31 of 33 06:52:10 06:52:10 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]
b7082104e4
[Firefox:91 hits: 06-18 to 08-16]		 none[4]
none [4]		 WinXP 8 of 33 03:41:01 13:02:07 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
1056cef861
NEW
8390780c27
[Firefox:33 hits: 06-18 to 08-06]		 none[none]
none [4]		 WinXP 30 of 32 06:19:22 06:19:22 1 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
2c85520f75
NEW
c61d687649
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 06:52:10 06:52:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:96 hits: 06-17 to 08-16]		 none[4] WinXP
Win2K-f		 31 of 33 17:23:47 22:12:04 2 none none:none
 tElock| none trace
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
6d0afb2b54
[Firefox: 3 hits: 08-06 to 08-14]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 35 of 36 11:13:41 11:13:41 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
1056cef861
NEW		 none[none] WinXP 1 of 36 06:19:22 06:19:22 1 none none:none
 none|none none none
a12cab51ef
[Firefox:471 hits: 01-01 to 08-16]		 40f7f463c4 [0] WinXP 29 of 29 16:53:33 16:53:33 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
9d1c8d89a4
[Firefox: 2 hits: 08-10 to 08-14]		 none[none]
none [none]
none [none]
none [none]		 WinXP 32 of 36 11:06:39 11:06:39 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
2ec24780fe
NEW		 none[none] WinXP 1 of 33 06:52:51 06:52:51 1 none none:none
 none|none none none
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
ba4637f8f0
[Firefox: 3 hits: 07-01 to 07-30]
c5e5182fde
[Firefox: 3 hits: 08-15 to 08-16]
d02ae67164
[Firefox: 3 hits: 07-01 to 07-30]		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 WinXP 31 of 33 11:30:53 11:30:53 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]		 none[none] WinXP
Win2K-f		 19 of 35 11:06:39 12:31:49 5 none none:none
 none|none none none
dfec585ee1
NEW		 none[none] WinXP 31 of 33 08:18:18 08:18:18 1 none none:none
 none|none none none
168aab35a3
[Firefox:96 hits: 06-17 to 08-16]
4c3df24b32
[Firefox:150 hits: 06-17 to 08-16]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 22:12:04 22:12:04 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
686d4ca67b
[Firefox: 2 hits: 07-08 to 07-27]
b7e379b157
[Firefox: 2 hits: 07-08 to 07-27]		 none[none]
none [none]		 Win2K-f 29 of 33 16:59:15 23:22:44 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:96 hits: 06-17 to 08-16]
667f0c59f3
[Firefox:14 hits: 07-04 to 08-16]		 none[4]
none [none]		 WinXP 31 of 33 17:23:47 17:23:47 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:285 hits: 01-05 to 08-16]		 e0197e8a64 [0] WinXP 31 of 32 05:36:34 18:24:53 6 none ASM:Graph
 none|none 100% lines=62 trace
aeac95b893
NEW		 none[none] WinXP 36 of 36 06:37:46 06:37:46 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]
bea8cb1865
[Firefox: 2 hits: 08-11 to 08-15]		 none[4]
none [none]		 WinXP 32 of 36 23:47:35 23:47:35 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
831f4ee0a7
[Firefox:487 hits: 01-01 to 08-16]		 eb7546c600 [0] WinXP 29 of 29 06:06:05 21:29:54 2 none ASM:Graph
 none|none 100% lines=61 trace
a0044bcb25
[Firefox: 5 hits: 08-02 to 08-16]		 none[none] WinXP 36 of 36 18:06:34 18:06:44 2 none none:none
 none|none none none
168aab35a3
[Firefox:96 hits: 06-17 to 08-16]
4c3df24b32
[Firefox:150 hits: 06-17 to 08-16]
b5919931fe
[Firefox:333 hits: 06-20 to 08-16]		 none[4]
4c3df24b32[1]
b5919931fe[1]		 Win2K-f 0 of 32 06:25:00 22:12:04 9 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
bfec7d0b0b
[Firefox: 6 hits: 08-06 to 08-12]		 none[none] WinXP 35 of 36 17:47:57 17:47:57 1 none none:none
 none|none none none
cc545e1c99
[Firefox: 3 hits: 05-30 to 08-09]		 97a4355156 [0] WinXP 28 of 31 02:33:38 02:33:38 1 none ASM:Graph
 none|none 47% lines=90 trace
3dffacd270
[Firefox: 7 hits: 06-20 to 08-14]
d5bf17f14e
[Firefox: 7 hits: 06-20 to 08-14]		 3dffacd270 [1]
none [4]		 WinXP 30 of 32 16:01:13 16:01:13 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
57ce4acac2
[Firefox:115 hits: 06-17 to 08-16]		 57ce4acac2 [1] WinXP
Win2K-f		 0 of 33 06:40:00 21:06:44 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
1a2c0e6130
[Firefox:329 hits: 12-31 to 08-16]		 048df78048 [0] WinXP 29 of 29 01:17:36 23:45:18 8 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]
a08f3b74a4
[Firefox:480 hits: 06-18 to 08-16]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:43:59 23:13:31 18 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 27 of 36 11:06:39 11:30:53 3 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
eae4b4bd5b
NEW		 none[none] WinXP 34 of 35 03:31:17 03:31:17 1 none none:none
 none|none none none
c8ea4e7945
NEW		 none[none] WinXP 31 of 36 12:37:38 12:37:38 1 none none:none
 none|none none none
a483ba8aa1
[Firefox:17 hits: 07-09 to 08-14]		 none[none] WinXP 33 of 33 01:36:06 14:08:16 3 none none:none
 none|none none none
09c3d90250
[Firefox: 3 hits: 08-04 to 08-15]
8f34a39070
[Firefox: 3 hits: 08-04 to 08-15]		 none[none]
none [none]		 Win2K-f 34 of 36 03:53:43 03:53:43 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3874ef05b8
NEW		 none[none] WinXP 35 of 35 01:07:00 01:07:00 1 none none:none
 none|none none none
1ad9dd6d67
NEW		 none[none] Win2K-f 34 of 36 09:43:17 09:43:17 1 none none:none
 none|none none none
2ec24780fe
NEW
780febebd5
[Firefox: 2 hits: 06-25 to 07-10]		 none[none]
none [none]		 WinXP 31 of 33 06:52:51 06:52:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8ae058b2d0
[Firefox: 9 hits: 05-01 to 08-12]		 e6a9383b75 [0] WinXP 30 of 32 12:03:59 12:03:59 1 none ASM:Graph
 none|none 97% lines=59 trace
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]		 none[none]
none [none]		 WinXP
Win2K-f		 17 of 35 11:06:39 12:31:49 5 none none:none
none:none
 none|none
none|none		 none
none		 none
none
686d4ca67b
[Firefox: 2 hits: 07-08 to 07-27]		 none[none] Win2K-f 32 of 33 16:59:15 23:22:44 2 none none:none
 none|none none none
607b60ad51
[Firefox:18 hits: 06-20 to 08-15]
e07c29c4ae
[Firefox:264 hits: 06-19 to 08-16]
e5c7bce70e
[Firefox:18 hits: 06-20 to 08-15]		 none[4]
e07c29c4ae[1]
e5c7bce70e[1]		 WinXP 2 of 32 18:00:07 18:00:07 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
FSG|
Armadillo|		 47% none
lines=92
lines=81		 trace
trace
trace
8a75955033
[Firefox:22 hits: 06-20 to 08-16]
9276c8b36b
[Firefox:22 hits: 06-20 to 08-16]		 none[4]
9276c8b36b[1]		 WinXP 28 of 32 22:51:36 22:51:36 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
25d78144c5
[Firefox: 8 hits: 08-01 to 08-10]		 none[none] WinXP 35 of 36 03:40:56 03:40:56 1 none none:none
 none|none none none
3373948767
[Firefox:17 hits: 07-03 to 08-09]
c73f738c30
[Firefox:17 hits: 07-03 to 08-09]		 none[none]
none [none]		 Win2K-f 29 of 33 08:44:41 08:44:41 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
38f6fc3dfb
NEW		 none[none] Win2K-f 32 of 36 07:10:02 07:10:02 1 none none:none
 none|none none none
8fe109b183
NEW		 none[none] WinXP 0 of 36 12:32:31 12:32:31 1 none none:none
 none|none none none
df17a625ee
[Firefox:214 hits: 01-01 to 08-16]		 9bbdd086c5 [0] WinXP 29 of 29 12:32:31 20:47:38 2 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
986b59708d
[Firefox:61 hits: 01-14 to 08-16]		 8a00217866 [0] WinXP 29 of 29 10:24:27 22:45:37 3 none ASM:Graph
 PolyEnE| 100% lines=57 trace
27b945de66
[Firefox:13 hits: 06-20 to 08-14]		 none[4] WinXP 31 of 32 00:17:06 18:11:47 3 none none:none
 none|none none trace
0a2b1894da
[Firefox: 2 hits: 06-26 to 08-13]		 none[none] Win2K-f 30 of 33 08:12:09 08:12:09 1 none none:none
 none|none none none
1790f3a44b
NEW
e05c782a35
NEW		 none[none]
none [none]		 WinXP 33 of 36 00:23:31 00:23:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1473 hits: 06-17 to 08-16]
a08f3b74a4
[Firefox:480 hits: 06-18 to 08-16]
e07c29c4ae
[Firefox:264 hits: 06-19 to 08-16]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 00:23:31 23:10:28 14 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
23b2288763
[Firefox: 2 hits: 07-15 to 07-27]		 none[none] Win2K-f 30 of 33 00:13:52 00:13:52 1 none none:none
 none|none none none
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
6d0afb2b54
[Firefox: 3 hits: 08-06 to 08-14]
c5e5182fde
[Firefox: 3 hits: 08-15 to 08-16]
fbd87f4eaa
[Firefox: 3 hits: 08-06 to 08-14]		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 32 of 36 11:13:41 11:13:41 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
8a75955033
[Firefox:22 hits: 06-20 to 08-16]		 none[4] WinXP 29 of 32 22:51:36 22:51:36 1 none none:none
 tElock| none trace
996e09cd66
[Firefox: 3 hits: 08-01 to 08-05]		 none[none] WinXP 36 of 36 01:03:18 01:03:18 1 none none:none
 none|none none none
15d4d85dc0
[Firefox: 4 hits: 06-10 to 08-13]		 none[4] WinXP 32 of 32 08:25:12 08:25:12 1 none none:none
 StarForce| none trace
378a4bac36
[Firefox: 7 hits: 07-01 to 08-09]		 none[none] WinXP 30 of 33 20:08:37 20:08:37 1 none none:none
 none|none none none
16093f1f91
NEW
e07c29c4ae
[Firefox:264 hits: 06-19 to 08-16]
f922aca9bb
NEW		 none[none]
e07c29c4ae[1]
none [none]		 Win2K-f
WinXP		 32 of 36 16:04:29 18:04:25 2 none none:none
ASM:Graph
none:none
 none|none
FSG|
none|none		 none
lines=92
none		 none
trace
none
72d732b448
NEW		 none[none] Win2K-f 31 of 36 16:20:13 16:20:13 1 none none:none
 none|none none none
0a2b1894da
[Firefox: 2 hits: 06-26 to 08-13]
414b95a784
[Firefox: 2 hits: 06-26 to 08-13]		 none[none]
none [none]		 Win2K-f 32 of 33 08:12:09 08:12:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
57ce4acac2
[Firefox:115 hits: 06-17 to 08-16]
83f26f5044
[Firefox:18 hits: 06-20 to 07-28]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 21:06:44 21:06:44 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f60162c2c
[Firefox:457 hits: 12-31 to 08-16]		 1aad8e4632 [0] WinXP 25 of 25 01:48:34 18:21:42 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
042774a2b7
[Firefox:31 hits: 01-14 to 08-05]		 1c9a472cd7 [0] WinXP 29 of 29 16:57:38 16:57:38 1 none ASM:Graph
 PolyEnE| 0% lines=71
embedded dns		 trace
954a98c971
[Firefox: 8 hits: 06-09 to 08-07]		 none[4] Win2K-f 31 of 33 07:11:42 07:11:42 1 none none:none
 FSG| none trace
38f6fc3dfb
NEW
4b77b2419c
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 07:10:02 07:10:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16093f1f91
NEW		 none[none] Win2K-f
WinXP		 35 of 36 16:04:29 18:04:25 2 none none:none
 none|none none none
a12cab51ef
[Firefox:471 hits: 01-01 to 08-16]
d59a3d6a6e
NEW		 40f7f463c4 [0]
none [none]		 WinXP 0 of 36 16:53:33 16:53:33 1 none ASM:Graph
none:none
 ASPack|
none|none		 lines=281
embedded dns
none		 trace
none
3373948767
[Firefox:17 hits: 07-03 to 08-09]		 none[none] Win2K-f 30 of 33 08:44:41 08:44:41 1 none none:none
 none|none none none
b5919931fe
[Firefox:333 hits: 06-20 to 08-16]
da00a8e7a1
[Firefox: 6 hits: 08-05 to 08-15]		 b5919931fe [1]
none [none]		 Win2K-f 34 of 36 06:25:00 06:25:00 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
ba4637f8f0
[Firefox: 3 hits: 07-01 to 07-30]		 none[none]
none [none]
none [none]
none [none]		 WinXP 28 of 33 11:30:53 11:30:53 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
7d99b0e910
[Firefox:964 hits: 12-31 to 08-16]		 7a70e1b592 [0] WinXP 26 of 28 09:14:48 23:15:42 10 none ASM:Graph
 PolyEnE| 99% lines=68 trace
366148f7b7
[Firefox:15 hits: 07-06 to 07-25]		 none[none] WinXP 31 of 33 11:39:11 11:39:11 1 none none:none
 none|none none none
09c3d90250
[Firefox: 3 hits: 08-04 to 08-15]		 none[none] Win2K-f 32 of 36 03:53:43 03:53:43 1 none none:none
 none|none none none
1790f3a44b
NEW		 none[none] WinXP 35 of 36 00:23:31 00:23:31 1 none none:none
 none|none none none
4565d1626f
[Firefox: 2 hits: 08-16 to 08-16]		 none[none] WinXP 36 of 36 22:00:59 22:02:46 2 none none:none
 none|none none none
607b60ad51
[Firefox:18 hits: 06-20 to 08-15]		 none[4] WinXP 31 of 32 18:00:07 18:00:07 1 none none:none
 tElock| none trace
a92e3f8fc8
[Firefox:26 hits: 01-26 to 07-28]		 dfe02a1e52 [0] WinXP 26 of 28 20:15:39 20:15:39 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
37f41fd8ab
[Firefox:84 hits: 07-24 to 08-16]
5ab0a45f63
[Firefox:102 hits: 07-24 to 08-16]
664857e986
NEW
9d1c8d89a4
[Firefox: 2 hits: 08-10 to 08-14]
b57dbae4a3
[Firefox: 2 hits: 08-10 to 08-14]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP 34 of 36 11:06:39 11:06:39 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
3dffacd270
[Firefox: 7 hits: 06-20 to 08-14]		 3dffacd270 [1] WinXP 28 of 32 16:01:13 16:01:13 1 none ASM:Graph
 Armadillo| 47% lines=82 trace