Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


21 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6ec2a8994b
[Firefox:16 hits: 06-18 to 08-20]
857b781ca9
[Firefox:11 hits: 06-18 to 08-16]		 none[4]
857b781ca9[1]		 WinXP 29 of 33 23:17:09 23:17:09 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
73f1082158
[Firefox:837 hits: 06-18 to 08-20]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:36:51 23:57:06 25 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox:13 hits: 04-05 to 08-13]		 eda2056971 [0] WinXP 31 of 32 03:33:30 03:33:30 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
e253fef35b
[Firefox: 4 hits: 08-10 to 08-20]		 none[none] WinXP 36 of 36 10:47:05 10:47:05 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]		 none[4] WinXP
Win2K-f		 33 of 33 00:36:51 23:57:06 49 none none:none
 tElock| none trace
3f0a5b2ebe
[Firefox:13 hits: 06-18 to 08-20]
c6bfb5f0f2
[Firefox:13 hits: 06-18 to 08-20]		 none[4]
c6bfb5f0f2[1]		 Win2K-f 28 of 32 11:32:00 11:32:00 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
b7082104e4
[Firefox:108 hits: 06-18 to 08-20]		 none[4]
none [4]		 WinXP 8 of 33 05:50:31 09:43:53 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
ff06f98413
[Firefox: 3 hits: 08-14 to 08-19]		 none[none] WinXP 14 of 36 01:04:17 01:04:17 1 none none:none
 none|none none none
b6dd987421
NEW		 none[none] WinXP 34 of 36 06:59:50 06:59:50 1 none none:none
 none|none none none
390fc2abcf
NEW		 none[none] WinXP 33 of 36 22:11:01 22:11:01 1 none none:none
 none|none none none
9824b60bec
[Firefox: 5 hits: 08-18 to 08-20]		 none[none] Win2K-f
WinXP		 31 of 36 15:14:11 15:14:41 2 none none:none
 none|none none none
533d15b5ce
[Firefox:18 hits: 06-21 to 08-19]		 none[4] Win2K-f 30 of 33 23:14:51 23:14:51 1 none none:none
 tElock| none trace
bca9e0fb5f
[Firefox:21 hits: 06-18 to 08-19]		 none[4] Win2K-f 31 of 32 22:43:49 22:43:49 1 none none:none
 PolyEnE| none trace
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
b6cf789b7d
[Firefox: 2 hits: 07-22 to 08-04]		 none[4]
none [none]		 WinXP 25 of 34 16:15:44 16:15:44 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
1338638084
NEW		 none[none] WinXP 35 of 36 15:49:09 15:49:09 1 none none:none
 none|none none none
a12cab51ef
[Firefox:481 hits: 01-01 to 08-20]		 40f7f463c4 [0] WinXP 29 of 29 01:30:05 22:06:04 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f502585714
[Firefox:37 hits: 01-02 to 08-18]		 ae590430c5 [0] WinXP 29 of 29 16:36:46 16:36:48 2 none ASM:Graph
 PolyEnE| 100% lines=63 trace
591b10ae0c
NEW
723ead74bb
NEW
7452c8448d
[Firefox:11 hits: 06-17 to 08-10]		 none[none]
none [none]
none [4]		 Win2K-f 30 of 32 10:12:41 18:43:14 2 none none:none
none:none
none:none
 none|none
none|none
PolyEnE|		 none
none
none		 none
none
trace
03f912899b
[Firefox:97 hits: 01-08 to 08-20]		 83893bd25d [0] WinXP 32 of 32 04:17:50 22:10:10 3 none ASM:Graph
 none|none 100% lines=65 trace
390fc2abcf
NEW
d8819d5861
NEW		 none[none]
none [none]		 WinXP 31 of 36 22:11:01 22:11:01 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
591b10ae0c
NEW
723ead74bb
NEW
7452c8448d
[Firefox:11 hits: 06-17 to 08-10]
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW
9d7e724938
NEW
b5919931fe
[Firefox:429 hits: 06-20 to 08-20]
df688a6301
NEW		 none[none]
none [none]
none [4]
none [none]
none [none]
none [none]
b5919931fe[1]
none [none]		 Win2K-f 8 of 36 18:43:14 18:43:14 1 none none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
PolyEnE|
none|none
none|none
none|none
ASProtect|
none|none		 none
none
none
none
none
none
lines=90
none		 none
none
trace
none
none
none
trace
none
289328df27
[Firefox: 2 hits: 08-07 to 08-07]		 none[none] WinXP 35 of 36 09:22:55 09:22:57 2 none none:none
 none|none none none
4c3df24b32
[Firefox:162 hits: 06-17 to 08-20]		 4c3df24b32 [1] WinXP
Win2K-f		 0 of 33 17:56:10 22:09:29 3 none ASM:Graph
 Armadillo| 47% lines=81 trace
591b10ae0c
NEW
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW
83b181dc8f
NEW
b646ed5e8f
NEW
ed8407ee00
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 34 of 36 15:06:46 15:06:46 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
48bc07f9ed
[Firefox: 3 hits: 06-21 to 07-04]
a5308d87d0
[Firefox: 5 hits: 06-21 to 07-04]		 none[4]
a5308d87d0[1]		 WinXP 29 of 33 22:55:52 22:55:52 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
741e3b03b3
[Firefox:307 hits: 01-05 to 08-20]		 e0197e8a64 [0] WinXP 31 of 32 03:16:42 05:45:55 3 none ASM:Graph
 none|none 100% lines=62 trace
4864a03a4b
[Firefox: 3 hits: 07-24 to 08-10]		 none[none] Win2K-f 31 of 34 10:12:41 10:12:41 1 none none:none
 none|none none none
591b10ae0c
NEW
723ead74bb
NEW
7452c8448d
[Firefox:11 hits: 06-17 to 08-10]
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW
9d7e724938
NEW		 none[none]
none [none]
none [4]
none [none]
none [none]
none [none]		 Win2K-f 5 of 36 18:43:14 18:43:14 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
PolyEnE|
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
trace
none
none
none
831f4ee0a7
[Firefox:496 hits: 01-01 to 08-20]		 eb7546c600 [0] WinXP 29 of 29 02:09:16 20:20:03 5 none ASM:Graph
 none|none 100% lines=61 trace
533d15b5ce
[Firefox:18 hits: 06-21 to 08-19]
58c343a8d8
[Firefox:20 hits: 06-21 to 08-20]		 none[4]
58c343a8d8[1]		 Win2K-f 28 of 33 23:14:51 23:14:51 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
a8c074e136
NEW		 none[none] Win2K-f 34 of 36 11:51:27 11:51:27 1 none none:none
 none|none none none
3f0a5b2ebe
[Firefox:13 hits: 06-18 to 08-20]		 none[4] Win2K-f 32 of 33 11:32:00 11:32:00 1 none none:none
 PolyEnE| none trace
48bc07f9ed
[Firefox: 3 hits: 06-21 to 07-04]		 none[4] WinXP 30 of 33 22:55:52 22:55:52 1 none none:none
 PolyEnE| none trace
591b10ae0c
NEW
723ead74bb
NEW
7452c8448d
[Firefox:11 hits: 06-17 to 08-10]
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]		 none[none]
none [none]
none [4]
none [none]		 Win2K-f 14 of 36 15:06:46 18:43:14 2 none none:none
none:none
none:none
none:none
 none|none
none|none
PolyEnE|
none|none		 none
none
none
none		 none
none
trace
none
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
73f1082158
[Firefox:837 hits: 06-18 to 08-20]
b5919931fe
[Firefox:429 hits: 06-20 to 08-20]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 01:06:15 21:12:45 14 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
b6dd987421
NEW
d789c8d157
[Firefox: 3 hits: 07-05 to 08-20]		 none[none]
none [none]		 WinXP 31 of 33 06:59:50 06:59:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
57ce4acac2
[Firefox:138 hits: 06-17 to 08-20]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 03:52:55 18:03:28 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6ec2a8994b
[Firefox:16 hits: 06-18 to 08-20]
bcf66a38c8
[Firefox: 3 hits: 07-30 to 08-20]		 none[4]
none [none]		 WinXP 2 of 35 02:05:52 02:05:52 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
670c7c2788
NEW		 none[none] WinXP 36 of 36 17:31:13 17:31:13 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:346 hits: 12-31 to 08-20]		 048df78048 [0] WinXP 29 of 29 10:11:48 15:48:02 5 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
a08f3b74a4
[Firefox:554 hits: 06-18 to 08-20]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 01:13:48 22:07:49 16 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
591b10ae0c
NEW
723ead74bb
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 18:43:14 18:43:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
591b10ae0c
NEW
723ead74bb
NEW
7452c8448d
[Firefox:11 hits: 06-17 to 08-10]
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW		 none[none]
none [none]
none [4]
none [none]
none [none]		 Win2K-f 26 of 36 15:06:46 18:43:14 2 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
PolyEnE|
none|none
none|none		 none
none
none
none
none		 none
none
trace
none
none
a0139d7ad8
[Firefox:89 hits: 01-03 to 08-16]		 d9e9662db1 [0] WinXP 29 of 29 07:26:42 08:24:18 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
5364c612fa
[Firefox: 4 hits: 07-06 to 08-07]		 none[none] Win2K-f 30 of 32 06:58:04 06:58:04 1 none none:none
 none|none none none
8ae058b2d0
[Firefox:10 hits: 05-01 to 08-17]		 e6a9383b75 [0] WinXP 30 of 32 11:40:49 11:40:49 1 none ASM:Graph
 none|none 97% lines=59 trace
0a836cbce2
NEW
15f9f6c10f
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 19:58:37 19:58:37 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4b2541d5f7
NEW		 none[none] WinXP 35 of 36 14:03:40 14:03:47 2 none none:none
 none|none none none
a8c074e136
NEW
fc22cbd605
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 11:51:27 11:51:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6ec2a8994b
[Firefox:16 hits: 06-18 to 08-20]		 none[4] WinXP 30 of 33 02:05:52 23:17:09 2 none none:none
 tElock| none trace
df17a625ee
[Firefox:221 hits: 01-01 to 08-20]		 9bbdd086c5 [0] WinXP 29 of 29 08:57:10 08:57:10 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
986b59708d
[Firefox:66 hits: 01-14 to 08-20]		 8a00217866 [0] WinXP 29 of 29 04:18:23 13:23:38 4 none ASM:Graph
 PolyEnE| 100% lines=57 trace
0a836cbce2
NEW		 none[none] Win2K-f 35 of 36 19:58:37 19:58:37 1 none none:none
 none|none none none
591b10ae0c
NEW
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW
83b181dc8f
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 4 of 36 15:06:46 15:06:46 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
591b10ae0c
NEW
75d013e972
[Firefox: 3 hits: 08-20 to 08-20]
7f172e7407
NEW
83b181dc8f
NEW
b646ed5e8f
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 8 of 36 15:06:46 15:06:46 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
bca9e0fb5f
[Firefox:21 hits: 06-18 to 08-19]
e53a9ea82e
[Firefox:21 hits: 06-18 to 08-19]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 22:43:49 22:43:49 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
4113025530
[Firefox: 5 hits: 07-30 to 08-18]		 none[none] Win2K-f 33 of 35 17:58:58 17:58:58 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1671 hits: 06-17 to 08-20]
73f1082158
[Firefox:837 hits: 06-18 to 08-20]
e07c29c4ae
[Firefox:337 hits: 06-19 to 08-20]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 01:13:48 18:44:44 12 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
703944cf7c
NEW		 none[none] Win2K-f 33 of 36 11:31:30 11:31:30 1 none none:none
 none|none none none
800a150255
NEW
d68923548b
NEW		 none[none]
none [none]		 WinXP 32 of 36 17:33:24 17:33:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
68a76c215f
[Firefox: 2 hits: 08-14 to 08-19]		 none[none] WinXP 36 of 36 07:55:21 07:55:21 1 none none:none
 none|none none none
4113025530
[Firefox: 5 hits: 07-30 to 08-18]
b5919931fe
[Firefox:429 hits: 06-20 to 08-20]
e3ca792d99
[Firefox: 5 hits: 07-30 to 08-18]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 32 of 35 17:58:58 17:58:58 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
3cd7958258
[Firefox:19 hits: 06-17 to 08-16]		 none[4] Win2K-f 30 of 33 10:10:51 10:10:51 1 none none:none
 tElock| none trace
9d51993bf7
NEW		 none[none] WinXP 35 of 36 11:07:10 11:07:10 1 none none:none
 none|none none none
7f60162c2c
[Firefox:478 hits: 12-31 to 08-20]		 1aad8e4632 [0] WinXP 25 of 25 04:14:09 18:01:30 8 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:21 hits: 07-28 to 08-20]		 none[none] WinXP 35 of 35 20:31:19 20:31:19 1 none none:none
 none|none none none
3cd7958258
[Firefox:19 hits: 06-17 to 08-16]
41efedf70f
[Firefox:18 hits: 06-19 to 08-16]		 none[4]
41efedf70f[1]		 Win2K-f 28 of 32 10:10:51 10:10:51 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
f0b49cdcfc
[Firefox: 8 hits: 07-04 to 08-18]		 none[none] WinXP 33 of 33 13:19:57 13:19:57 1 none none:none
 none|none none none
800a150255
NEW		 none[none] WinXP 34 of 35 17:33:24 17:33:24 1 none none:none
 none|none none none
277034540e
[Firefox: 6 hits: 07-12 to 08-18]
b5919931fe
[Firefox:429 hits: 06-20 to 08-20]
ea43badccf
[Firefox: 6 hits: 07-12 to 08-18]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 31 of 33 01:06:15 01:06:15 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
001b6f7107
[Firefox: 4 hits: 07-29 to 08-08]		 none[none] WinXP 35 of 35 18:14:41 18:14:41 1 none none:none
 none|none none none
7d99b0e910
[Firefox:998 hits: 12-31 to 08-20]		 7a70e1b592 [0] WinXP 26 of 28 06:47:35 18:18:11 5 none ASM:Graph
 PolyEnE| 99% lines=68 trace
452313e1c7
NEW		 none[none] WinXP 28 of 35 03:04:42 03:04:42 1 none none:none
 none|none none none
277034540e
[Firefox: 6 hits: 07-12 to 08-18]		 none[none] Win2K-f 28 of 33 01:06:15 01:06:15 1 none none:none
 none|none none none
591b10ae0c
NEW		 none[none] Win2K-f 21 of 36 15:06:46 18:43:14 2 none none:none
 none|none none none
a92e3f8fc8
[Firefox:27 hits: 01-26 to 08-17]		 dfe02a1e52 [0] WinXP 26 of 28 20:05:42 20:05:42 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace