Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


23 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3db2c812c0
[Firefox: 2 hits: 07-23 to 08-20]		 none[none] Win2K-f 31 of 33 00:55:44 00:55:44 1 none none:none
 none|none none none
95a1e56583
[Firefox: 4 hits: 08-02 to 08-09]
b39357c344
[Firefox: 4 hits: 08-02 to 08-09]		 none[none]
none [none]		 Win2K-f
WinXP		 35 of 36 02:44:50 03:11:29 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]
73f1082158
[Firefox:875 hits: 06-18 to 08-22]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:11:58 20:52:03 18 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
f190da6fbe
[Firefox:25 hits: 01-02 to 08-20]		 d8dc6af14c [0] WinXP 27 of 32 01:20:02 01:20:02 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
e253fef35b
[Firefox: 6 hits: 08-10 to 08-22]		 none[none] WinXP 36 of 36 19:21:36 19:21:36 1 none none:none
 none|none none none
1fcc146d70
[Firefox:30 hits: 01-02 to 08-22]		 258fafe892 [0] WinXP 29 of 29 13:52:02 13:52:02 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]		 none[4] Win2K-f
WinXP		 33 of 33 00:11:58 23:54:12 40 none none:none
 tElock| none trace
0bfa79dc19
[Firefox: 7 hits: 07-22 to 08-18]		 none[none] WinXP 31 of 33 07:40:50 07:40:50 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]
74beb44673
NEW		 none[4]
none [none]		 Win2K-f 0 of 0 23:54:12 23:54:12 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
b19b1a3b65
NEW		 none[none] WinXP 36 of 36 12:46:53 12:46:53 1 none none:none
 none|none none none
9bc67c754e
[Firefox: 3 hits: 06-28 to 08-14]		 none[none] WinXP 28 of 32 08:58:00 08:58:00 1 none none:none
 none|none none none
3db2c812c0
[Firefox: 2 hits: 07-23 to 08-20]
797fdec34a
[Firefox: 2 hits: 07-23 to 08-20]		 none[none]
none [none]		 Win2K-f 30 of 35 00:55:44 00:55:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f93c947614
NEW		 none[none] Win2K-f 0 of 0 12:26:24 12:52:11 2 none none:none
 none|none none none
0af737004d
NEW		 none[none] WinXP 0 of 0 06:48:06 06:48:06 1 none none:none
 none|none none none
2e04b06527
[Firefox: 5 hits: 06-18 to 08-16]
5c054291de
[Firefox: 5 hits: 06-18 to 08-16]		 none[4]
5c054291de[1]		 Win2K-f 30 of 33 22:53:07 22:53:07 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
2dac184b3e
NEW		 none[none] WinXP 0 of 0 04:07:41 04:07:41 1 none none:none
 none|none none none
168aab35a3
[Firefox:110 hits: 06-17 to 08-20]		 none[4] WinXP 31 of 33 00:59:23 01:33:53 2 none none:none
 tElock| none trace
e8d4d8cde1
[Firefox:408 hits: 03-31 to 08-13]		 fda109a6fd [0] WinXP 13 of 31 19:17:45 19:17:45 1 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
95a1e56583
[Firefox: 4 hits: 08-02 to 08-09]		 none[none] Win2K-f
WinXP		 32 of 36 02:44:50 03:11:29 2 none none:none
 none|none none none
bca9e0fb5f
[Firefox:23 hits: 06-18 to 08-22]		 none[4] Win2K-f 31 of 32 23:07:37 23:07:37 1 none none:none
 PolyEnE| none trace
a12cab51ef
[Firefox:484 hits: 01-01 to 08-22]		 40f7f463c4 [0] WinXP 29 of 29 05:41:13 16:02:25 2 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f502585714
[Firefox:39 hits: 01-02 to 08-21]		 ae590430c5 [0] WinXP 29 of 29 13:53:13 13:53:13 1 none ASM:Graph
 PolyEnE| 100% lines=63 trace
4399ada715
NEW		 none[none] Win2K-f 0 of 0 19:11:19 19:11:19 1 none none:none
 none|none none none
29e37f674b
NEW		 none[none] WinXP 0 of 0 18:18:07 18:18:07 1 none none:none
 none|none none none
9d571adc3c
[Firefox: 5 hits: 07-04 to 08-15]
a704164588
[Firefox: 7 hits: 07-04 to 08-15]		 none[none]
none [none]		 Win2K-f 31 of 33 20:45:39 20:45:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0f7b6b4c31
[Firefox: 3 hits: 08-09 to 08-18]		 none[none] WinXP 34 of 36 00:59:23 00:59:23 1 none none:none
 none|none none none
6905ca887e
NEW		 none[none] WinXP 0 of 0 07:12:12 07:12:12 1 none none:none
 none|none none none
ba4637f8f0
[Firefox: 8 hits: 07-01 to 08-19]
d02ae67164
[Firefox: 8 hits: 07-01 to 08-19]		 none[none]
none [none]		 Win2K-f 31 of 33 12:33:19 12:33:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:110 hits: 06-17 to 08-20]
4c3df24b32
[Firefox:166 hits: 06-17 to 08-22]		 none[4]
4c3df24b32[1]		 WinXP 0 of 33 01:33:53 01:33:53 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
9963e9c1ff
NEW		 none[none] Win2K-f 32 of 33 05:14:03 05:14:03 1 none none:none
 none|none none none
741e3b03b3
[Firefox:316 hits: 01-05 to 08-22]		 e0197e8a64 [0] WinXP 31 of 32 00:39:59 17:29:30 7 none ASM:Graph
 none|none 100% lines=62 trace
0bfa79dc19
[Firefox: 7 hits: 07-22 to 08-18]
8dfb3b619f
[Firefox: 8 hits: 07-22 to 08-18]		 none[none]
none [none]		 WinXP 29 of 34 07:40:50 07:40:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]
bea8cb1865
[Firefox: 6 hits: 08-11 to 08-22]		 none[4]
none [none]		 WinXP 32 of 36 22:41:17 22:41:17 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
831f4ee0a7
[Firefox:503 hits: 01-01 to 08-22]		 eb7546c600 [0] WinXP 29 of 29 07:50:52 22:41:10 2 none ASM:Graph
 none|none 100% lines=61 trace
5f78ff609d
[Firefox:1550 hits: 04-27 to 07-25]		 d4a06bdc3a [0] Win2K-f
WinXP		 21 of 32 05:05:56 17:03:15 4 none ASM:Graph
 none|none 46% lines=4 trace
a0044bcb25
[Firefox: 8 hits: 08-02 to 08-22]		 none[none] WinXP 36 of 36 14:16:43 14:17:08 2 none none:none
 none|none none none
75d013e972
[Firefox: 6 hits: 08-20 to 08-22]		 none[none] Win2K-f 14 of 36 02:44:50 02:44:50 1 none none:none
 none|none none none
4b8f246a8b
NEW		 none[none] WinXP 0 of 0 15:48:56 15:48:56 1 none none:none
 none|none none none
1f59c01aef
[Firefox: 6 hits: 08-01 to 08-20]
b5919931fe
[Firefox:449 hits: 06-20 to 08-22]		 none[none]
b5919931fe[1]		 Win2K-f 0 of 32 00:47:36 21:30:13 13 none none:none
ASM:Graph
 none|none
ASProtect|		 48% none
lines=90		 none
trace
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]
57ce4acac2
[Firefox:142 hits: 06-17 to 08-22]		 none[4]
57ce4acac2[1]		 WinXP 0 of 33 01:25:09 06:31:24 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
57b907a474
[Firefox: 2 hits: 08-09 to 08-12]		 none[none] Win2K-f 35 of 36 00:45:09 00:45:09 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:356 hits: 12-31 to 08-22]		 048df78048 [0] WinXP 29 of 29 01:24:28 23:52:14 6 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1754 hits: 06-17 to 08-22]
74beb44673
NEW
a08f3b74a4
[Firefox:586 hits: 06-18 to 08-22]		 none[4]
none [none]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:47:36 23:54:12 21 none none:none
none:none
ASM:Graph
 tElock|
none|none
Armadillo|		 47% none
none
lines=81		 trace
none
trace
a08f3b74a4
[Firefox:586 hits: 06-18 to 08-22]
ddd2a2b264
[Firefox: 2 hits: 06-17 to 06-26]		 a08f3b74a4 [1]
none [4]		 Win2K-f 31 of 33 23:17:26 23:17:26 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
b7d380ff22
NEW		 none[none] WinXP 0 of 0 20:26:14 20:26:14 1 none none:none
 none|none none none
e4157a2cc3
NEW		 none[none] WinXP 0 of 0 12:36:38 12:36:38 1 none none:none
 none|none none none
4399ada715
NEW
8bda658cfc
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 19:11:19 19:11:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
57b907a474
[Firefox: 2 hits: 08-09 to 08-12]
88765a5690
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 00:45:09 00:45:09 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9b9e5dcb18
[Firefox:11 hits: 08-08 to 08-22]		 none[none] WinXP 36 of 36 03:40:06 03:40:06 1 none none:none
 none|none none none
5364c612fa
[Firefox: 5 hits: 07-06 to 08-21]		 none[none] Win2K-f 30 of 32 09:50:53 09:50:53 1 none none:none
 none|none none none
2d76ff4e53
[Firefox: 5 hits: 07-23 to 08-20]		 none[none] Win2K-f 34 of 35 18:55:21 23:09:29 2 none none:none
 none|none none none
607b60ad51
[Firefox:24 hits: 06-20 to 08-22]
b5919931fe
[Firefox:449 hits: 06-20 to 08-22]
e5c7bce70e
[Firefox:23 hits: 06-20 to 08-22]		 none[4]
b5919931fe[1]
e5c7bce70e[1]		 Win2K-f 2 of 32 21:29:22 21:29:22 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
ASProtect|
Armadillo|		 47% none
lines=90
lines=81		 trace
trace
trace
16874933ea
[Firefox:35 hits: 06-18 to 08-19]
76ee340669
[Firefox:36 hits: 06-18 to 08-19]		 16874933ea [1]
none [4]		 WinXP 33 of 33 20:41:20 20:41:20 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
f8be62d9a3
NEW		 none[none] WinXP 0 of 0 02:38:36 02:38:36 1 none none:none
 none|none none none
4b8f246a8b
NEW
df17a625ee
[Firefox:223 hits: 01-01 to 08-22]		 none[none]
9bbdd086c5[0]		 WinXP 29 of 29 15:48:56 15:48:56 1 none none:none
ASM:Graph
 none|none
ASPack|		 49% none
lines=186
embedded dns		 none
trace
27efd0d239
NEW		 none[none] WinXP 0 of 0 05:41:13 05:41:13 1 none none:none
 none|none none none
88a52ae8ef
NEW		 none[none] WinXP 0 of 0 09:33:16 09:33:42 2 none none:none
 none|none none none
a98959852f
NEW		 none[none] WinXP 0 of 0 16:17:43 16:17:43 1 none none:none
 none|none none none
1f59c01aef
[Firefox: 6 hits: 08-01 to 08-20]		 none[none] Win2K-f 34 of 36 21:30:13 21:30:13 1 none none:none
 none|none none none
c925f34dbe
[Firefox: 2 hits: 06-27 to 08-11]
e07c29c4ae
[Firefox:356 hits: 06-19 to 08-22]
f3f14bc33d
[Firefox: 2 hits: 06-27 to 08-11]		 none[none]
e07c29c4ae[1]
none [none]		 WinXP 32 of 33 02:48:37 02:48:37 1 none none:none
ASM:Graph
none:none
 none|none
FSG|
none|none		 none
lines=92
none		 none
trace
none
9963e9c1ff
NEW
a647a60592
NEW		 none[none]
none [none]		 Win2K-f 30 of 33 05:14:03 05:14:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1f59c01aef
[Firefox: 6 hits: 08-01 to 08-20]
b5919931fe
[Firefox:449 hits: 06-20 to 08-22]
dc92683d9a
[Firefox:13 hits: 06-19 to 08-20]		 none[none]
b5919931fe[1]
dc92683d9a[1]		 Win2K-f 29 of 33 21:30:13 21:30:13 1 none none:none
ASM:Graph
ASM:Graph
 none|none
ASProtect|
Armadillo|		 47% none
lines=90
lines=82		 none
trace
trace
bca9e0fb5f
[Firefox:23 hits: 06-18 to 08-22]
e53a9ea82e
[Firefox:23 hits: 06-18 to 08-22]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 23:07:37 23:07:37 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
77bf3c6d25
NEW
88fd020726
NEW		 none[none]
none [none]		 WinXP 0 of 0 22:11:12 22:11:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:35 hits: 06-18 to 08-19]		 16874933ea [1] WinXP 29 of 33 20:41:20 20:41:20 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
292524fd0a
NEW		 none[none] Win2K-f 0 of 0 14:26:31 14:26:31 1 none none:none
 none|none none none
77bf3c6d25
NEW
88fd020726
NEW
e07c29c4ae
[Firefox:356 hits: 06-19 to 08-22]		 none[none]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 01:33:53 22:11:12 7 none none:none
none:none
ASM:Graph
 none|none
none|none
FSG|		 48% none
none
lines=92		 none
none
trace
75d013e972
[Firefox: 6 hits: 08-20 to 08-22]
812a0cf35a
NEW		 none[none]
none [none]		 Win2K-f 26 of 36 02:44:50 02:44:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
07ecb6c660
NEW		 none[none] WinXP 35 of 36 12:56:06 12:56:06 1 none none:none
 none|none none none
15d4d85dc0
[Firefox: 8 hits: 06-10 to 08-22]		 none[4] WinXP
Win2K-f		 32 of 32 04:42:38 17:39:32 2 none none:none
 StarForce| none trace
55920d1404
NEW		 none[none] WinXP 0 of 0 10:45:18 10:45:18 1 none none:none
 none|none none none
c925f34dbe
[Firefox: 2 hits: 06-27 to 08-11]		 none[none] WinXP 29 of 33 02:48:37 02:48:37 1 none none:none
 none|none none none
6905ca887e
NEW
9a2feabbac
NEW		 none[none]
none [none]		 WinXP 0 of 0 07:12:12 07:12:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:492 hits: 12-31 to 08-22]		 1aad8e4632 [0] WinXP 25 of 25 07:58:27 18:27:03 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
776985f561
[Firefox: 7 hits: 06-24 to 08-19]		 776985f561 [1] Win2K-f 31 of 33 05:25:46 09:51:40 2 none ASM:Graph
 Armadillo| 47% lines=82 trace
126a1d4446
NEW		 none[none] Win2K-f 35 of 36 01:45:41 01:45:41 1 none none:none
 none|none none none
b74e792974
[Firefox: 5 hits: 06-18 to 08-22]		 b74e792974 [1] Win2K-f 31 of 33 23:15:11 23:15:11 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
a219ed3aeb
[Firefox:15 hits: 08-02 to 08-15]		 none[none] WinXP 36 of 36 15:39:56 15:39:56 1 none none:none
 none|none none none
ba4637f8f0
[Firefox: 8 hits: 07-01 to 08-19]		 none[none] Win2K-f 28 of 33 12:33:19 12:33:19 1 none none:none
 none|none none none
f26cd0d5b0
NEW		 none[none] WinXP 0 of 0 10:46:06 10:46:06 1 none none:none
 none|none none none
2d76ff4e53
[Firefox: 5 hits: 07-23 to 08-20]
7df1377ee3
[Firefox: 5 hits: 07-23 to 08-20]		 none[none]
none [none]		 Win2K-f 32 of 35 18:55:21 23:09:29 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1009 hits: 12-31 to 08-22]		 7a70e1b592 [0] WinXP 26 of 28 01:31:02 23:32:25 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
27efd0d239
NEW
a12cab51ef
[Firefox:484 hits: 01-01 to 08-22]
bde0cba53d
NEW		 none[none]
40f7f463c4[0]
none [none]		 WinXP 0 of 0 05:41:13 05:41:13 1 none none:none
ASM:Graph
none:none
 none|none
ASPack|
none|none		 none
lines=281
embedded dns
none		 none
trace
none
9d571adc3c
[Firefox: 5 hits: 07-04 to 08-15]		 none[none] Win2K-f 31 of 33 20:45:39 20:45:39 1 none none:none
 none|none none none
776985f561
[Firefox: 7 hits: 06-24 to 08-19]
8ec6129efe
[Firefox: 7 hits: 06-24 to 08-19]		 776985f561 [1]
none [4]		 Win2K-f 31 of 33 05:25:46 09:51:40 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
b74e792974
[Firefox: 5 hits: 06-18 to 08-22]
f0e73c39a8
[Firefox: 6 hits: 06-18 to 08-22]		 b74e792974 [1]
none [4]		 Win2K-f 31 of 33 23:15:11 23:15:11 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
2e04b06527
[Firefox: 5 hits: 06-18 to 08-16]		 none[4] Win2K-f 30 of 33 22:53:07 22:53:07 1 none none:none
 tElock| none trace
c4c5a56ffe
[Firefox: 5 hits: 08-15 to 08-22]		 none[none] Win2K-f 11 of 36 21:52:47 21:52:47 1 none none:none
 none|none none none
77bf3c6d25
NEW		 none[none] WinXP 0 of 0 22:11:12 22:11:12 1 none none:none
 none|none none none
607b60ad51
[Firefox:24 hits: 06-20 to 08-22]		 none[4] Win2K-f 31 of 32 21:29:22 21:29:22 1 none none:none
 tElock| none trace
29e37f674b
NEW
410269507b
NEW		 none[none]
none [none]		 WinXP 0 of 0 18:18:07 18:18:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none