Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


24 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]
73f1082158
[Firefox:893 hits: 06-18 to 08-23]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:40:31 23:38:00 18 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2851817490
[Firefox: 3 hits: 06-27 to 07-19]		 none[none] Win2K-f 32 of 33 02:19:48 02:19:48 1 none none:none
 none|none none none
1fcc146d70
[Firefox:31 hits: 01-02 to 08-23]		 258fafe892 [0] WinXP 29 of 29 16:45:30 16:45:30 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]		 none[4] Win2K-f
WinXP		 33 of 33 00:40:31 23:41:05 38 none none:none
 tElock| none trace
3f0a5b2ebe
[Firefox:14 hits: 06-18 to 08-21]
c6bfb5f0f2
[Firefox:14 hits: 06-18 to 08-21]		 none[4]
c6bfb5f0f2[1]		 WinXP 28 of 32 06:53:24 06:53:24 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
21f744cf9b
NEW		 none[none] WinXP 36 of 36 11:22:27 11:22:27 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 3 hits: 06-18 to 08-09]
e5e0dbde57
[Firefox: 3 hits: 06-18 to 08-09]		 1951eee0cd [1]
none [4]		 Win2K-f 31 of 33 03:37:42 03:37:42 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
b19b1a3b65
[Firefox: 2 hits: 08-22 to 08-23]		 none[none] WinXP 36 of 36 04:38:45 14:32:17 3 none none:none
 none|none none none
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]
b7082104e4
[Firefox:113 hits: 06-18 to 08-22]		 none[4]
none [4]		 WinXP 8 of 33 21:42:48 21:42:48 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5aeb9abc92
[Firefox:10 hits: 07-15 to 08-20]		 none[none] Win2K-f 26 of 32 22:27:37 22:27:37 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 3 hits: 06-18 to 08-09]		 1951eee0cd [1] Win2K-f 27 of 33 03:37:42 03:37:42 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
2f27f1f3ed
NEW
5f8dacfa58
NEW		 none[none]
none [none]		 Win2K-f 2 of 36 21:33:12 21:33:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:112 hits: 06-17 to 08-23]		 none[4] Win2K-f
WinXP		 31 of 33 03:36:35 20:46:08 3 none none:none
 tElock| none trace
8350eec99e
NEW		 none[none] WinXP 35 of 36 11:54:02 11:54:02 1 none none:none
 none|none none none
9d1c8d89a4
[Firefox: 4 hits: 08-10 to 08-19]		 none[none] Win2K-f 32 of 36 05:33:27 05:33:27 1 none none:none
 none|none none none
03f912899b
[Firefox:103 hits: 01-08 to 08-22]		 83893bd25d [0] WinXP 32 of 32 03:40:56 05:00:22 2 none ASM:Graph
 none|none 100% lines=65 trace
4c3df24b32
[Firefox:167 hits: 06-17 to 08-23]		 4c3df24b32 [1] WinXP
Win2K-f		 0 of 33 01:06:55 12:28:57 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
63452bf08e
NEW		 none[none] WinXP 34 of 35 01:35:25 10:58:49 2 none none:none
 none|none none none
3ed16ae12d
[Firefox:14 hits: 06-19 to 08-19]		 3ed16ae12d [1] Win2K-f 3 of 33 23:24:28 23:24:28 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
9963e9c1ff
[Firefox: 2 hits: 06-26 to 08-23]		 none[none] WinXP 32 of 33 07:48:51 07:48:51 1 none none:none
 none|none none none
168aab35a3
[Firefox:112 hits: 06-17 to 08-23]
667f0c59f3
[Firefox:18 hits: 07-04 to 08-20]		 none[4]
none [none]		 Win2K-f 31 of 33 03:36:35 03:36:35 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:323 hits: 01-05 to 08-23]		 e0197e8a64 [0] WinXP 31 of 32 02:23:59 22:36:33 9 none ASM:Graph
 none|none 100% lines=62 trace
2f27f1f3ed
NEW		 none[none] Win2K-f 34 of 36 21:33:12 21:33:12 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:505 hits: 01-01 to 08-23]		 eb7546c600 [0] WinXP 29 of 29 03:01:41 06:58:19 2 none ASM:Graph
 none|none 100% lines=61 trace
3f0a5b2ebe
[Firefox:14 hits: 06-18 to 08-21]		 none[4] WinXP 32 of 33 06:53:24 06:53:24 1 none none:none
 PolyEnE| none trace
2d76ff4e53
[Firefox: 7 hits: 07-23 to 08-23]
75d013e972
[Firefox: 7 hits: 08-20 to 08-23]		 none[none]
none [none]		 Win2K-f 14 of 36 01:08:28 01:08:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3ed16ae12d
[Firefox:14 hits: 06-19 to 08-19]
79c01ec060
[Firefox:25 hits: 06-18 to 08-22]
b5919931fe
[Firefox:462 hits: 06-20 to 08-23]		 3ed16ae12d [1]
none [4]
b5919931fe[1]		 Win2K-f 0 of 32 07:23:39 23:24:28 9 none ASM:Graph
none:none
ASM:Graph
 Armadillo|
tElock|
ASProtect|		 48% lines=81
none
lines=90		 trace
trace
trace
3099ee9232
NEW
45ee08c58b
NEW		 none[none]
none [none]		 WinXP 0 of 36 04:45:01 04:45:01 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
bfec7d0b0b
[Firefox: 8 hits: 08-06 to 08-19]		 none[none] WinXP 35 of 36 13:55:36 13:55:40 2 none none:none
 none|none none none
7b2dec4d44
NEW		 7b2dec4d44 [1] WinXP 1 of 33 07:10:19 07:10:19 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
bcf66a38c8
[Firefox: 4 hits: 07-30 to 08-21]		 none[none] Win2K-f 2 of 35 10:47:11 10:47:11 1 none none:none
 none|none none none
bcf66a38c8
[Firefox: 4 hits: 07-30 to 08-21]
d5bf17f14e
[Firefox: 8 hits: 06-20 to 08-17]		 none[none]
none [4]		 WinXP
Win2K-f		 30 of 32 07:10:19 10:47:11 2 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]
57ce4acac2
[Firefox:144 hits: 06-17 to 08-23]		 none[4]
57ce4acac2[1]		 WinXP
Win2K-f		 0 of 33 06:39:25 13:09:37 4 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1a2c0e6130
[Firefox:362 hits: 12-31 to 08-23]		 048df78048 [0] WinXP 29 of 29 03:59:46 19:24:23 6 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]
a08f3b74a4
[Firefox:607 hits: 06-18 to 08-23]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 02:56:18 23:41:05 16 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
e4157a2cc3
NEW		 none[none] WinXP 36 of 36 17:28:08 17:28:08 1 none none:none
 none|none none none
8e4e1ec135
NEW		 none[none] WinXP 35 of 36 03:50:48 03:50:48 1 none none:none
 none|none none none
017226a316
[Firefox: 3 hits: 07-27 to 08-13]		 none[none] Win2K-f 33 of 35 08:05:28 08:05:28 1 none none:none
 none|none none none
6f48587848
[Firefox: 2 hits: 02-18 to 08-14]
88765a5690
NEW		 0bc04966dd [0]
none [none]		 Win2K-f 11 of 36 07:05:04 07:05:04 1 none none:none
none:none
 none|none
none|none		 none
none		 trace
none
ec93bb7379
NEW		 none[none] WinXP 33 of 35 11:02:14 11:02:14 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:91 hits: 01-03 to 08-21]		 d9e9662db1 [0] WinXP 29 of 29 10:34:21 18:14:30 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
3a813df3ed
[Firefox: 5 hits: 02-04 to 08-11]		 7759abbf55 [0] WinXP 28 of 29 09:56:06 09:56:06 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
330eaa2da2
[Firefox:17 hits: 01-28 to 08-20]		 none[3] WinXP 28 of 29 07:23:55 07:23:55 1 none none:none
 ASPack| none trace
2d76ff4e53
[Firefox: 7 hits: 07-23 to 08-23]		 none[none] Win2K-f 34 of 35 01:08:28 01:08:28 1 none none:none
 none|none none none
607b60ad51
[Firefox:25 hits: 06-20 to 08-23]
e5c7bce70e
[Firefox:24 hits: 06-20 to 08-23]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 00:06:06 16:15:35 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2851817490
[Firefox: 3 hits: 06-27 to 07-19]
624c441842
[Firefox: 2 hits: 06-27 to 07-19]		 none[none]
none [none]		 Win2K-f 9 of 33 02:19:48 02:19:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a75955033
[Firefox:27 hits: 06-20 to 08-20]
9276c8b36b
[Firefox:27 hits: 06-20 to 08-20]		 none[4]
9276c8b36b[1]		 WinXP 28 of 32 22:10:59 22:10:59 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
017226a316
[Firefox: 3 hits: 07-27 to 08-13]
9b03689ec5
[Firefox: 3 hits: 07-27 to 08-13]		 none[none]
none [none]		 Win2K-f 30 of 35 08:05:28 08:05:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
25d78144c5
[Firefox:11 hits: 08-01 to 08-19]		 none[none] WinXP 35 of 36 08:17:37 08:17:40 2 none none:none
 none|none none none
4b2541d5f7
[Firefox: 4 hits: 08-19 to 08-22]		 none[none] WinXP 35 of 36 13:37:17 16:10:05 3 none none:none
 none|none none none
e30fb27bda
[Firefox: 4 hits: 07-07 to 08-19]		 none[none] WinXP 33 of 33 15:14:39 15:14:39 1 none none:none
 none|none none none
986b59708d
[Firefox:71 hits: 01-14 to 08-22]		 8a00217866 [0] WinXP 29 of 29 20:33:32 20:33:32 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
9963e9c1ff
[Firefox: 2 hits: 06-26 to 08-23]
a647a60592
[Firefox: 2 hits: 06-26 to 08-23]		 none[none]
none [none]		 WinXP 30 of 33 07:48:51 07:48:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1794 hits: 06-17 to 08-23]
73f1082158
[Firefox:893 hits: 06-18 to 08-23]
e07c29c4ae
[Firefox:363 hits: 06-19 to 08-23]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 00:19:48 23:38:00 6 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
2d76ff4e53
[Firefox: 7 hits: 07-23 to 08-23]
75d013e972
[Firefox: 7 hits: 08-20 to 08-23]
7df1377ee3
[Firefox: 7 hits: 07-23 to 08-23]
812a0cf35a
[Firefox: 2 hits: 08-22 to 08-23]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 26 of 36 01:08:28 01:08:28 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
8a75955033
[Firefox:27 hits: 06-20 to 08-20]		 none[4] WinXP 29 of 32 22:10:59 22:10:59 1 none none:none
 tElock| none trace
3099ee9232
NEW		 none[none] WinXP 0 of 36 04:45:01 04:45:01 1 none none:none
 none|none none none
6f48587848
[Firefox: 2 hits: 02-18 to 08-14]		 0bc04966dd [0] Win2K-f 21 of 30 07:05:04 07:05:04 1 none none:none
 none|none none trace
3099ee9232
NEW
45ee08c58b
NEW
7337e0f9fe
NEW		 none[none]
none [none]
none [none]		 WinXP 35 of 36 04:45:01 04:45:01 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
7f60162c2c
[Firefox:496 hits: 12-31 to 08-23]		 1aad8e4632 [0] WinXP 25 of 25 01:24:39 16:21:37 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:22 hits: 07-28 to 08-21]		 none[none] WinXP 35 of 35 03:07:48 08:23:53 4 none none:none
 none|none none none
0aba74f83a
NEW
1d215d08be
NEW		 none[none]
none [none]		 WinXP 33 of 35 20:25:57 20:25:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b40d13789d
NEW		 none[none] WinXP 35 of 35 17:42:02 17:42:02 1 none none:none
 none|none none none
3ed16ae12d
[Firefox:14 hits: 06-19 to 08-19]
79c01ec060
[Firefox:25 hits: 06-18 to 08-22]		 3ed16ae12d [1]
none [4]		 Win2K-f 33 of 33 23:24:28 23:24:28 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
2d76ff4e53
[Firefox: 7 hits: 07-23 to 08-23]
75d013e972
[Firefox: 7 hits: 08-20 to 08-23]
7df1377ee3
[Firefox: 7 hits: 07-23 to 08-23]		 none[none]
none [none]
none [none]		 Win2K-f 32 of 35 01:08:28 01:08:28 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
7d99b0e910
[Firefox:1017 hits: 12-31 to 08-23]		 7a70e1b592 [0] WinXP 26 of 28 08:28:11 23:53:28 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
0aba74f83a
NEW		 none[none] WinXP 31 of 35 20:25:57 20:25:57 1 none none:none
 none|none none none
168aab35a3
[Firefox:112 hits: 06-17 to 08-23]
f62373a83b
[Firefox: 3 hits: 07-03 to 07-28]		 none[4]
none [none]		 Win2K-f 30 of 33 20:46:08 20:46:08 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
2e45ae247e
[Firefox: 5 hits: 06-25 to 08-11]		 none[none] WinXP 0 of 33 16:13:46 16:13:46 1 none none:none
 none|none none none
c9d01112a8
[Firefox: 4 hits: 08-06 to 08-11]		 none[none] WinXP 35 of 36 10:17:46 10:17:57 2 none none:none
 none|none none none
c4c5a56ffe
[Firefox: 6 hits: 08-15 to 08-23]		 none[none] WinXP 11 of 36 05:47:34 05:47:34 1 none none:none
 none|none none none
607b60ad51
[Firefox:25 hits: 06-20 to 08-23]		 none[4] WinXP 31 of 32 00:06:06 16:15:35 3 none none:none
 tElock| none trace
4c3df24b32
[Firefox:167 hits: 06-17 to 08-23]
58408136a4
[Firefox:15 hits: 06-28 to 08-20]		 4c3df24b32 [1]
none [none]		 Win2K-f 32 of 33 07:17:24 12:28:57 2 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
df2f0e165e
NEW		 none[none] WinXP 35 of 35 07:47:12 07:47:12 1 none none:none
 none|none none none
4442fbf8df
NEW		 none[none] WinXP 34 of 36 02:26:29 02:26:29 1 none none:none
 none|none none none
9d1c8d89a4
[Firefox: 4 hits: 08-10 to 08-19]
b57dbae4a3
[Firefox: 4 hits: 08-10 to 08-19]		 none[none]
none [none]		 Win2K-f 34 of 36 05:33:27 05:33:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c48a98539d
NEW		 none[none] WinXP 35 of 36 03:15:27 03:15:27 1 none none:none
 none|none none none