Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


25 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
73f1082158
[Firefox:911 hits: 06-18 to 08-24]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:22:11 23:16:46 23 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2851817490
[Firefox: 4 hits: 06-27 to 08-24]		 none[none] WinXP 32 of 33 08:39:52 08:39:52 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]		 none[4] Win2K-f
WinXP		 33 of 33 00:22:11 23:41:54 35 none none:none
 tElock| none trace
3f0a5b2ebe
[Firefox:15 hits: 06-18 to 08-24]
c6bfb5f0f2
[Firefox:15 hits: 06-18 to 08-24]		 none[4]
c6bfb5f0f2[1]		 Win2K-f 28 of 32 02:56:16 02:56:16 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
b7082104e4
[Firefox:114 hits: 06-18 to 08-24]		 none[4]
none [4]		 WinXP 8 of 33 02:15:48 02:17:44 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
819406a2a1
NEW		 none[none] Win2K-f 32 of 36 08:15:25 08:15:25 1 none none:none
 none|none none none
c86fc630d2
[Firefox: 2 hits: 05-18 to 05-18]		 none[4] WinXP 0 of 0 12:14:23 12:20:29 2 none none:none
 ASProtect| none trace
2851817490
[Firefox: 4 hits: 06-27 to 08-24]
ed4acd1f8e
NEW		 none[none]
none [none]		 WinXP 26 of 33 08:39:52 08:39:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
dfc43fb6c7
NEW		 none[none] Win2K-f
WinXP		 33 of 36 13:12:01 13:12:03 2 none none:none
 none|none none none
168aab35a3
[Firefox:115 hits: 06-17 to 08-24]		 none[4] WinXP
Win2K-f		 31 of 33 02:08:11 09:33:10 4 none none:none
 tElock| none trace
cc303a6263
NEW		 none[none] WinXP 11 of 36 12:07:05 12:07:05 1 none none:none
 none|none none none
cd75030ece
[Firefox: 8 hits: 07-29 to 08-05]
e8d4d8cde1
[Firefox:409 hits: 03-31 to 08-23]		 none[none]
fda109a6fd[0]		 Win2K-f
WinXP		 13 of 31 10:51:55 13:23:20 32 none none:none
ASM:Graph
 none|none
ASProtect|		 64% none
lines=583
embedded dns		 none
trace
168aab35a3
[Firefox:115 hits: 06-17 to 08-24]
cc53fa213b
[Firefox: 2 hits: 08-07 to 08-16]		 none[4]
none [none]		 WinXP 34 of 36 02:08:11 02:08:11 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
42901ef5c6
NEW
5749944768
NEW
a12cab51ef
[Firefox:486 hits: 01-01 to 08-23]		 none[none]
none [none]
40f7f463c4[0]		 WinXP 29 of 29 14:38:51 16:25:48 2 none none:none
none:none
ASM:Graph
 none|none
none|none
ASPack|		 54% none
none
lines=281
embedded dns		 none
none
trace
cd75030ece
[Firefox: 8 hits: 07-29 to 08-05]
e203ce72cd
NEW
fc14c6727d
NEW		 none[none]
none [none]
none [none]		 Win2K-f 35 of 36 12:06:19 12:06:19 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
03f912899b
[Firefox:105 hits: 01-08 to 08-24]		 83893bd25d [0] WinXP 32 of 32 03:45:24 03:45:24 1 none ASM:Graph
 none|none 100% lines=65 trace
766eff0ca8
NEW		 none[none] WinXP 35 of 36 15:48:24 15:48:24 1 none none:none
 none|none none none
07645465a6
NEW		 none[none] WinXP
Win2K-f		 33 of 36 18:18:36 18:19:30 2 none none:none
 none|none none none
115b5d71ef
NEW
4e5279ec45
NEW
75d013e972
[Firefox: 8 hits: 08-20 to 08-24]
7f2646c230
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP
Win2K-f		 26 of 36 08:50:25 13:12:01 2 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
168aab35a3
[Firefox:115 hits: 06-17 to 08-24]
667f0c59f3
[Firefox:19 hits: 07-04 to 08-24]		 none[4]
none [none]		 Win2K-f 31 of 33 05:07:37 05:07:37 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:332 hits: 01-05 to 08-24]		 e0197e8a64 [0] WinXP 31 of 32 03:25:19 21:58:39 3 none ASM:Graph
 none|none 100% lines=62 trace
42901ef5c6
NEW		 none[none] WinXP 0 of 36 16:25:48 16:25:48 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:507 hits: 01-01 to 08-24]		 eb7546c600 [0] WinXP 29 of 29 01:36:09 18:55:57 8 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
bea8cb1865
[Firefox: 7 hits: 08-11 to 08-23]		 none[4]
none [none]		 Win2K-f 32 of 36 03:43:04 03:43:04 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
cd75030ece
[Firefox: 8 hits: 07-29 to 08-05]		 none[none] WinXP
Win2K-f		 18 of 35 11:06:30 13:23:20 9 none none:none
 none|none none none
3f0a5b2ebe
[Firefox:15 hits: 06-18 to 08-24]		 none[4] Win2K-f 32 of 33 02:56:16 02:56:16 1 none none:none
 PolyEnE| none trace
115b5d71ef
NEW
4e5279ec45
NEW
75d013e972
[Firefox: 8 hits: 08-20 to 08-24]		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 14 of 36 08:50:25 13:12:01 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
264f19f9cc
NEW		 none[none] WinXP 28 of 36 10:51:58 10:51:58 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
73f1082158
[Firefox:911 hits: 06-18 to 08-24]
b5919931fe
[Firefox:471 hits: 06-20 to 08-24]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 03:23:29 21:38:22 4 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
57ce4acac2
[Firefox:148 hits: 06-17 to 08-24]		 none[4]
57ce4acac2[1]		 Win2K-f
WinXP		 0 of 33 13:26:07 23:41:54 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6ec2a8994b
[Firefox:18 hits: 06-18 to 08-21]
bcf66a38c8
[Firefox: 5 hits: 07-30 to 08-24]		 none[4]
none [none]		 WinXP 2 of 35 08:36:22 08:36:22 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
3dffacd270
[Firefox: 8 hits: 06-20 to 08-17]
d5bf17f14e
[Firefox:10 hits: 06-20 to 08-24]		 3dffacd270 [1]
none [4]		 Win2K-f 30 of 32 07:33:40 07:33:40 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
ba063349f2
NEW		 none[none] WinXP 23 of 32 16:27:23 16:27:23 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:368 hits: 12-31 to 08-24]		 048df78048 [0] WinXP 29 of 29 18:32:41 22:14:48 2 none ASM:Graph
 none|none 100% lines=61 trace
819406a2a1
NEW
aa0a8d6314
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 08:15:25 08:15:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
a08f3b74a4
[Firefox:623 hits: 06-18 to 08-24]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 06:04:07 21:02:47 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
490bccf8d8
NEW		 none[none] WinXP 35 of 36 06:11:05 06:11:05 1 none none:none
 none|none none none
e4157a2cc3
[Firefox: 2 hits: 08-23 to 08-24]		 none[none] WinXP 36 of 36 04:20:41 04:20:41 1 none none:none
 none|none none none
017226a316
[Firefox: 4 hits: 07-27 to 08-24]		 none[none] Win2K-f 33 of 35 16:54:08 16:54:08 1 none none:none
 none|none none none
381e3033c0
NEW		 none[none] WinXP
Win2K-f		 2 of 36 13:31:33 15:26:40 2 none none:none
 none|none none none
a0139d7ad8
[Firefox:93 hits: 01-03 to 08-24]		 d9e9662db1 [0] WinXP 29 of 29 13:17:02 13:17:02 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
0e97465e3f
NEW		 none[none] Win2K-f
WinXP		 26 of 36 11:02:47 11:05:03 2 none none:none
 none|none none none
9b9e5dcb18
[Firefox:12 hits: 08-08 to 08-23]		 none[none] WinXP 36 of 36 09:34:10 09:34:10 1 none none:none
 none|none none none
ba063349f2
NEW
e60e575448
NEW		 none[none]
none [none]		 WinXP 0 of 36 16:27:23 16:27:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
10a081161d
NEW
351f8b17da
NEW
35f4e44060
NEW
75d013e972
[Firefox: 8 hits: 08-20 to 08-24]
7f2646c230
NEW
b836bbbc36
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 WinXP 0 of 36 08:50:25 08:50:25 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
1a274b66c2
NEW		 none[none] WinXP 35 of 36 10:36:25 10:36:25 1 none none:none
 none|none none none
115b5d71ef
NEW
4e5279ec45
NEW		 none[none]
none [none]		 Win2K-f 13 of 36 13:12:01 13:12:01 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
cd75030ece
[Firefox: 8 hits: 07-29 to 08-05]
e203ce72cd
NEW		 none[none]
none [none]		 Win2K-f 11 of 36 12:06:19 12:06:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
10a081161d
NEW
351f8b17da
NEW		 none[none]
none [none]		 WinXP 13 of 36 08:50:25 08:50:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
cd75030ece
[Firefox: 8 hits: 07-29 to 08-05]
e8d4d8cde1
[Firefox:409 hits: 03-31 to 08-23]
efea4bcc80
NEW		 none[none]
fda109a6fd[0]
none [none]		 Win2K-f 11 of 36 12:05:08 12:05:08 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=583
embedded dns
none		 none
trace
none
017226a316
[Firefox: 4 hits: 07-27 to 08-24]
9b03689ec5
[Firefox: 4 hits: 07-27 to 08-24]		 none[none]
none [none]		 Win2K-f 30 of 35 16:54:08 16:54:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:36 hits: 06-18 to 08-23]
76ee340669
[Firefox:37 hits: 06-18 to 08-23]		 16874933ea [1]
none [4]		 WinXP 33 of 33 00:14:43 05:55:17 2 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
8a75955033
[Firefox:28 hits: 06-20 to 08-24]
9276c8b36b
[Firefox:28 hits: 06-20 to 08-24]		 none[4]
9276c8b36b[1]		 Win2K-f 28 of 32 05:16:00 23:36:20 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
168aab35a3
[Firefox:115 hits: 06-17 to 08-24]
7cebed19c8
[Firefox: 2 hits: 08-16 to 08-19]		 none[4]
none [none]		 WinXP 34 of 36 09:18:07 09:18:07 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
df17a625ee
[Firefox:224 hits: 01-01 to 08-23]		 9bbdd086c5 [0] WinXP 29 of 29 01:22:15 04:10:22 2 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
6ec2a8994b
[Firefox:18 hits: 06-18 to 08-21]		 none[4] WinXP 30 of 33 08:36:22 08:36:22 1 none none:none
 tElock| none trace
42901ef5c6
NEW
5749944768
NEW
a12cab51ef
[Firefox:486 hits: 01-01 to 08-23]
c84f80ac92
NEW		 none[none]
none [none]
40f7f463c4[0]
none [none]		 WinXP 0 of 36 16:25:48 16:25:48 1 none none:none
none:none
ASM:Graph
none:none
 none|none
none|none
ASPack|
none|none		 none
none
lines=281
embedded dns
none		 none
none
trace
none
24c3943ad4
NEW
abe1b198e4
NEW		 none[none]
none [none]		 WinXP 19 of 36 11:06:30 11:06:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:36 hits: 06-18 to 08-23]		 16874933ea [1] WinXP 29 of 33 00:14:43 05:55:17 2 none ASM:Graph
 Armadillo| 48% lines=82 trace
115b5d71ef
NEW		 none[none] Win2K-f 16 of 36 13:12:01 13:12:01 1 none none:none
 none|none none none
10a081161d
NEW
351f8b17da
NEW
35f4e44060
NEW		 none[none]
none [none]
none [none]		 WinXP 16 of 36 08:50:25 08:50:25 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
53bfe15e91
[Firefox:1832 hits: 06-17 to 08-24]
73f1082158
[Firefox:911 hits: 06-18 to 08-24]
e07c29c4ae
[Firefox:369 hits: 06-19 to 08-24]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 12:15:03 14:47:59 2 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
68a76c215f
[Firefox: 4 hits: 08-14 to 08-22]		 none[none] WinXP 36 of 36 04:45:37 19:29:03 2 none none:none
 none|none none none
8a75955033
[Firefox:28 hits: 06-20 to 08-24]		 none[4] Win2K-f 29 of 32 05:16:00 23:36:20 2 none none:none
 tElock| none trace
462c169957
NEW
82558dde21
NEW		 none[none]
none [none]		 Win2K-f 29 of 36 14:22:51 14:22:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
355cabe10f
[Firefox: 2 hits: 06-11 to 07-18]		 none[4] WinXP 31 of 32 00:37:58 00:37:58 1 none none:none
 StarForce| none trace
7f60162c2c
[Firefox:500 hits: 12-31 to 08-24]		 1aad8e4632 [0] WinXP 25 of 25 02:13:20 18:24:54 6 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:26 hits: 07-28 to 08-24]		 none[none] WinXP 35 of 35 07:18:00 20:03:31 2 none none:none
 none|none none none
42901ef5c6
NEW
5749944768
NEW		 none[none]
none [none]		 WinXP 0 of 36 16:25:48 16:25:48 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
462c169957
NEW		 none[none] Win2K-f 34 of 35 14:22:51 14:22:51 1 none none:none
 none|none none none
b74e792974
[Firefox: 6 hits: 06-18 to 08-23]		 b74e792974 [1] Win2K-f 31 of 33 13:47:32 13:47:32 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
24c3943ad4
NEW		 none[none] WinXP 11 of 36 11:06:30 11:06:30 1 none none:none
 none|none none none
a219ed3aeb
[Firefox:16 hits: 08-02 to 08-23]		 none[none] WinXP 36 of 36 20:22:50 20:22:50 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1024 hits: 12-31 to 08-24]		 7a70e1b592 [0] WinXP 26 of 28 07:04:32 23:59:57 5 none ASM:Graph
 PolyEnE| 99% lines=68 trace
10a081161d
NEW		 none[none] WinXP 34 of 36 08:50:25 08:50:25 1 none none:none
 none|none none none
b74e792974
[Firefox: 6 hits: 06-18 to 08-23]
f0e73c39a8
[Firefox: 7 hits: 06-18 to 08-23]		 b74e792974 [1]
none [4]		 Win2K-f 31 of 33 13:47:32 13:47:32 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
168aab35a3
[Firefox:115 hits: 06-17 to 08-24]
61426996c3
[Firefox:10 hits: 06-20 to 08-20]		 none[4]
61426996c3[1]		 Win2K-f 29 of 32 09:33:10 09:33:10 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
df2f0e165e
NEW		 none[none] WinXP 35 of 35 09:06:25 09:06:28 2 none none:none
 none|none none none
a73d9b037c
NEW		 none[none] WinXP 34 of 36 06:38:56 19:19:07 2 none none:none
 none|none none none
a92e3f8fc8
[Firefox:28 hits: 01-26 to 08-21]		 dfe02a1e52 [0] WinXP 26 of 28 06:05:27 06:05:27 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
de9dec4800
NEW		 none[none] WinXP 36 of 36 04:50:19 04:50:19 1 none none:none
 none|none none none
94396e7738
NEW		 none[none] WinXP 0 of 35 14:38:51 14:38:51 1 none none:none
 none|none none none
3dffacd270
[Firefox: 8 hits: 06-20 to 08-17]		 3dffacd270 [1] Win2K-f 28 of 32 07:33:40 07:33:40 1 none ASM:Graph
 Armadillo| 47% lines=82 trace