Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


26 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW		 none[none]
none [none]
none [none]		 Win2K-f 5 of 36 21:09:22 21:09:22 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW
7f2646c230
[Firefox: 2 hits: 08-25 to 08-25]
9b5f91cb49
[Firefox: 2 hits: 06-27 to 07-04]
a3131eadce
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 7 of 36 21:09:22 21:09:22 1 none none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none		 none
none
none
none
none
none
53bfe15e91
[Firefox:1867 hits: 06-17 to 08-25]
73f1082158
[Firefox:934 hits: 06-18 to 08-25]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:10:40 21:47:32 11 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1fcc146d70
[Firefox:32 hits: 01-02 to 08-24]		 258fafe892 [0] WinXP 29 of 29 23:29:22 23:29:22 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:1867 hits: 06-17 to 08-25]		 none[4] Win2K-f
WinXP		 33 of 33 00:10:40 22:55:55 21 none none:none
 tElock| none trace
0bfa79dc19
[Firefox: 8 hits: 07-22 to 08-23]		 none[none] Win2K-f 31 of 33 16:19:30 16:19:30 1 none none:none
 none|none none none
389cf0c860
NEW		 none[none] WinXP 34 of 36 07:19:07 07:19:07 1 none none:none
 none|none none none
c86fc630d2
[Firefox: 4 hits: 05-18 to 08-25]		 none[4] WinXP
Win2K-f		 0 of 0 05:37:38 05:54:23 2 none none:none
 ASProtect| none trace
3791fd8fbc
NEW		 none[none] WinXP 31 of 35 01:23:38 01:23:38 1 none none:none
 none|none none none
168aab35a3
[Firefox:119 hits: 06-17 to 08-25]		 none[4] Win2K-f 31 of 33 23:20:08 23:20:08 1 none none:none
 tElock| none trace
9ba1f1416a
NEW		 none[none] Win2K-f 2 of 36 00:49:18 00:49:18 1 none none:none
 none|none none none
f800dc9065
NEW		 none[none] WinXP 35 of 36 08:40:59 08:40:59 1 none none:none
 none|none none none
dadbc6fc39
NEW		 none[none] WinXP 34 of 36 15:35:50 15:35:50 1 none none:none
 none|none none none
e8d4d8cde1
[Firefox:441 hits: 03-31 to 08-25]		 fda109a6fd [0] WinXP
Win2K-f		 13 of 31 05:35:32 21:45:23 87 none ASM:Graph
 ASProtect| 64% lines=583
embedded dns		 trace
bca9e0fb5f
[Firefox:24 hits: 06-18 to 08-23]		 none[4] Win2K-f 31 of 32 23:10:55 23:10:55 1 none none:none
 PolyEnE| none trace
002eb58800
NEW
a12cab51ef
[Firefox:488 hits: 01-01 to 08-25]		 none[none]
40f7f463c4[0]		 WinXP 29 of 29 07:50:04 18:23:27 4 none none:none
ASM:Graph
 none|none
ASPack|		 54% none
lines=281
embedded dns		 none
trace
9d1c8d89a4
[Firefox: 5 hits: 08-10 to 08-24]		 none[none] Win2K-f 32 of 36 15:42:22 15:42:22 1 none none:none
 none|none none none
03f912899b
[Firefox:106 hits: 01-08 to 08-25]		 83893bd25d [0] WinXP 32 of 32 16:12:15 16:12:15 1 none ASM:Graph
 none|none 100% lines=65 trace
9d571adc3c
[Firefox: 6 hits: 07-04 to 08-23]
a704164588
[Firefox: 8 hits: 07-04 to 08-23]		 none[none]
none [none]		 WinXP 31 of 33 02:20:19 02:20:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b1c974ce20
NEW		 none[none] WinXP 35 of 36 18:43:20 18:43:20 1 none none:none
 none|none none none
31f6386815
NEW
6caf1059b7
NEW		 none[none]
none [none]		 WinXP 12 of 36 11:02:40 11:02:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:119 hits: 06-17 to 08-25]
4c3df24b32
[Firefox:171 hits: 06-17 to 08-24]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 05:34:13 23:20:08 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW
7f2646c230
[Firefox: 2 hits: 08-25 to 08-25]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 26 of 36 21:09:22 21:09:22 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
686d4ca67b
[Firefox: 4 hits: 07-08 to 08-17]
b7e379b157
[Firefox: 4 hits: 07-08 to 08-17]		 none[none]
none [none]		 WinXP 29 of 33 07:26:46 07:26:46 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
71abdae28b
NEW		 none[none] WinXP 0 of 36 16:01:56 16:01:56 1 none none:none
 none|none none none
741e3b03b3
[Firefox:335 hits: 01-05 to 08-25]		 e0197e8a64 [0] WinXP 31 of 32 04:24:25 18:31:30 3 none ASM:Graph
 none|none 100% lines=62 trace
002eb58800
NEW		 none[none] WinXP 0 of 33 18:23:27 18:23:27 1 none none:none
 none|none none none
0bfa79dc19
[Firefox: 8 hits: 07-22 to 08-23]
8dfb3b619f
[Firefox: 9 hits: 07-22 to 08-23]		 none[none]
none [none]		 Win2K-f 29 of 34 16:19:30 16:19:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
af49c2b9a4
NEW
cd75030ece
[Firefox:17 hits: 07-29 to 08-25]		 none[none]
none [none]		 Win2K-f 18 of 35 06:47:27 06:53:12 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]		 none[none]
none [none]		 Win2K-f 0 of 0 21:09:22 21:09:22 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW
7f2646c230
[Firefox: 2 hits: 08-25 to 08-25]
9b5f91cb49
[Firefox: 2 hits: 06-27 to 07-04]
a3131eadce
NEW
a7225eb3c3
NEW
b5919931fe
[Firefox:475 hits: 06-20 to 08-25]		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 01:59:10 21:09:22 7 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
ASM:Graph
 none|none
none|none
none|none
none|none
none|none
none|none
none|none
ASProtect|		 48% none
none
none
none
none
none
none
lines=90		 none
none
none
none
none
none
none
trace
17028f1eda
[Firefox:25 hits: 04-18 to 08-20]		 none[3] WinXP
Win2K-f		 31 of 32 04:08:36 11:49:35 3 none none:none
 tElock| none trace
93385541f3
[Firefox:20 hits: 06-22 to 08-04]		 none[4] WinXP 32 of 32 02:04:51 02:04:51 1 none none:none
 none|none none trace
57ce4acac2
[Firefox:150 hits: 06-17 to 08-25]		 57ce4acac2 [1] Win2K-f
WinXP		 0 of 33 01:59:10 13:34:51 3 none ASM:Graph
 Armadillo| 47% lines=81 trace
af79e0c602
[Firefox: 5 hits: 01-08 to 07-02]		 none[4] WinXP 29 of 30 08:44:47 08:44:47 1 none none:none
 ASPack| none trace
1a2c0e6130
[Firefox:370 hits: 12-31 to 08-25]		 048df78048 [0] WinXP 29 of 29 02:55:26 21:00:25 3 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1867 hits: 06-17 to 08-25]
a08f3b74a4
[Firefox:630 hits: 06-18 to 08-25]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 03:24:41 22:55:55 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
e4157a2cc3
[Firefox: 3 hits: 08-23 to 08-25]		 none[none] WinXP 36 of 36 03:59:29 09:03:45 2 none none:none
 none|none none none
a0139d7ad8
[Firefox:94 hits: 01-03 to 08-25]		 d9e9662db1 [0] WinXP 29 of 29 20:50:24 20:50:24 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
9b9e5dcb18
[Firefox:13 hits: 08-08 to 08-25]		 none[none] WinXP 36 of 36 09:02:31 09:02:31 1 none none:none
 none|none none none
ea9787a186
[Firefox: 3 hits: 06-20 to 07-09]		 none[4] Win2K-f 29 of 32 13:40:54 13:40:54 1 none none:none
 PolyEnE| none trace
686d4ca67b
[Firefox: 4 hits: 07-08 to 08-17]		 none[none] WinXP 32 of 33 07:26:46 07:26:46 1 none none:none
 none|none none none
60355a8247
NEW		 none[none] WinXP 34 of 36 01:47:49 01:47:49 1 none none:none
 none|none none none
31f6386815
NEW		 none[none] WinXP 12 of 36 11:02:40 11:02:40 1 none none:none
 none|none none none
607b60ad51
[Firefox:28 hits: 06-20 to 08-24]
e5c7bce70e
[Firefox:27 hits: 06-20 to 08-24]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 23:22:57 23:22:57 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
16874933ea
[Firefox:38 hits: 06-18 to 08-25]
76ee340669
[Firefox:39 hits: 06-18 to 08-25]		 16874933ea [1]
none [4]		 WinXP
Win2K-f		 33 of 33 03:44:10 23:47:07 2 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
25d78144c5
[Firefox:13 hits: 08-01 to 08-24]		 none[none] WinXP 35 of 36 13:21:00 13:21:00 1 none none:none
 none|none none none
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW
7f2646c230
[Firefox: 2 hits: 08-25 to 08-25]
9b5f91cb49
[Firefox: 2 hits: 06-27 to 07-04]
a3131eadce
NEW
a7225eb3c3
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 5 of 36 21:09:22 21:09:22 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none
none
none		 none
none
none
none
none
none
none
4c3df24b32
[Firefox:171 hits: 06-17 to 08-24]
6a4845ca11
[Firefox: 9 hits: 06-27 to 08-19]		 4c3df24b32 [1]
none [none]		 Win2K-f 0 of 0 20:46:59 20:46:59 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
a99f17e623
[Firefox:26 hits: 03-28 to 07-26]		 87dfec58db [0] WinXP 31 of 32 02:38:35 02:39:02 2 none ASM:Graph
 PolyEnE| 99% lines=69 trace
5ed8a3de6e
[Firefox: 3 hits: 05-18 to 07-06]		 none[4] WinXP 0 of 0 16:24:53 16:24:53 1 none none:none
 ASPack| none trace
07596695e7
NEW
49356df5bc
NEW
4cd00581cf
NEW
a12cab51ef
[Firefox:488 hits: 01-01 to 08-25]
f6adada986
NEW		 none[none]
none [none]
none [none]
40f7f463c4[0]
none [none]		 WinXP 0 of 36 07:50:04 07:50:04 1 none none:none
none:none
none:none
ASM:Graph
none:none
 none|none
none|none
none|none
ASPack|
none|none		 none
none
none
lines=281
embedded dns
none		 none
none
none
trace
none
2630a0890b
NEW
470e7533c6
[Firefox: 2 hits: 06-27 to 07-04]
6db077d95d
NEW
7f2646c230
[Firefox: 2 hits: 08-25 to 08-25]
9b5f91cb49
[Firefox: 2 hits: 06-27 to 07-04]		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 32 of 33 21:09:22 21:09:22 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
986b59708d
[Firefox:72 hits: 01-14 to 08-24]		 8a00217866 [0] WinXP 29 of 29 08:26:46 08:26:46 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
3a711c57d7
NEW		 none[none] WinXP 36 of 36 09:42:24 09:42:24 1 none none:none
 none|none none none
bca9e0fb5f
[Firefox:24 hits: 06-18 to 08-23]
e53a9ea82e
[Firefox:24 hits: 06-18 to 08-23]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 23:10:55 23:10:55 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
16874933ea
[Firefox:38 hits: 06-18 to 08-25]		 16874933ea [1] WinXP
Win2K-f		 29 of 33 03:44:10 23:47:07 3 none ASM:Graph
 Armadillo| 48% lines=82 trace
50f889782d
NEW		 none[none] Win2K-f
WinXP		 31 of 36 05:41:49 05:51:46 2 none none:none
 none|none none none
07596695e7
NEW
49356df5bc
NEW		 none[none]
none [none]		 WinXP 0 of 36 07:50:04 07:50:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4113025530
[Firefox: 6 hits: 07-30 to 08-21]		 none[none] Win2K-f 33 of 35 21:39:43 21:39:43 1 none none:none
 none|none none none
0c3d1ec2df
[Firefox: 2 hits: 08-11 to 08-20]		 none[none] Win2K-f 32 of 36 20:52:52 20:52:52 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1867 hits: 06-17 to 08-25]
a08f3b74a4
[Firefox:630 hits: 06-18 to 08-25]
e07c29c4ae
[Firefox:371 hits: 06-19 to 08-25]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 01:10:24 07:55:31 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
07596695e7
NEW
49356df5bc
NEW
4cd00581cf
NEW		 none[none]
none [none]
none [none]		 WinXP 0 of 36 07:50:04 07:50:04 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
2630a0890b
NEW		 none[none] Win2K-f 17 of 36 21:09:22 21:09:22 1 none none:none
 none|none none none
07596695e7
NEW		 none[none] WinXP 0 of 36 07:50:04 07:50:04 1 none none:none
 none|none none none
4113025530
[Firefox: 6 hits: 07-30 to 08-21]
e3ca792d99
[Firefox: 6 hits: 07-30 to 08-21]		 none[none]
none [none]		 Win2K-f 32 of 35 21:39:43 21:39:43 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
15d4d85dc0
[Firefox:10 hits: 06-10 to 08-23]		 none[4] WinXP 32 of 32 16:24:08 16:24:08 1 none none:none
 StarForce| none trace
8178c88f5e
[Firefox:17 hits: 07-08 to 08-10]		 none[none] WinXP 33 of 33 07:24:55 07:24:55 1 none none:none
 none|none none none
be5d4b567e
[Firefox: 2 hits: 01-13 to 07-29]		 none[none] WinXP 32 of 32 13:19:06 13:19:06 1 none none:none
 none|none none none
7f60162c2c
[Firefox:506 hits: 12-31 to 08-25]		 1aad8e4632 [0] WinXP 25 of 25 01:13:06 23:12:33 7 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
321052074e
[Firefox:12 hits: 02-23 to 06-27]		 1a587de3ca [0] WinXP 31 of 32 11:36:38 11:36:38 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
389cf0c860
NEW
ed7d5d9ce7
NEW		 none[none]
none [none]		 WinXP 33 of 36 07:19:07 07:19:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0c3d1ec2df
[Firefox: 2 hits: 08-11 to 08-20]
8de905030e
[Firefox: 2 hits: 08-11 to 08-20]		 none[none]
none [none]		 Win2K-f 34 of 36 20:52:52 20:52:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
be7575fc11
NEW		 none[none] WinXP 12 of 36 20:00:03 20:00:03 1 none none:none
 none|none none none
a219ed3aeb
[Firefox:17 hits: 08-02 to 08-25]		 none[none] WinXP 36 of 36 03:08:17 03:08:17 1 none none:none
 none|none none none
3ae357d17b
[Firefox:168 hits: 01-01 to 08-22]		 462a7be171 [0] WinXP 29 of 29 13:07:05 13:07:05 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
001b6f7107
[Firefox: 5 hits: 07-29 to 08-21]		 none[none] WinXP 35 of 35 18:44:45 18:44:45 1 none none:none
 none|none none none
3791fd8fbc
NEW
739d080108
NEW		 none[none]
none [none]		 WinXP 31 of 35 01:23:38 01:23:38 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1029 hits: 12-31 to 08-25]		 7a70e1b592 [0] WinXP 26 of 28 04:04:10 22:46:15 5 none ASM:Graph
 PolyEnE| 99% lines=68 trace
af49c2b9a4
NEW		 none[none] Win2K-f 12 of 36 06:53:12 06:53:12 1 none none:none
 none|none none none
002eb58800
NEW
a12cab51ef
[Firefox:488 hits: 01-01 to 08-25]
e683883fe3
NEW		 none[none]
40f7f463c4[0]
none [none]		 WinXP 0 of 36 18:23:27 18:23:27 1 none none:none
ASM:Graph
none:none
 none|none
ASPack|
none|none		 none
lines=281
embedded dns
none		 none
trace
none
79d36a1053
NEW		 none[none] WinXP
Win2K-f		 31 of 33 09:05:55 09:16:29 2 none none:none
 none|none none none
b3154d1b2a
NEW		 none[none] WinXP 36 of 36 14:49:46 14:49:46 1 none none:none
 none|none none none
a12cab51ef
[Firefox:488 hits: 01-01 to 08-25]
c508727292
NEW		 40f7f463c4 [0]
none [none]		 WinXP 0 of 36 15:12:57 15:12:57 1 none ASM:Graph
none:none
 ASPack|
none|none		 lines=281
embedded dns
none		 trace
none
9d571adc3c
[Firefox: 6 hits: 07-04 to 08-23]		 none[none] WinXP 31 of 33 02:20:19 02:20:19 1 none none:none
 none|none none none
607b60ad51
[Firefox:28 hits: 06-20 to 08-24]		 none[4] WinXP 31 of 32 23:22:57 23:22:57 1 none none:none
 tElock| none trace
9d1c8d89a4
[Firefox: 5 hits: 08-10 to 08-24]
b57dbae4a3
[Firefox: 5 hits: 08-10 to 08-24]		 none[none]
none [none]		 Win2K-f 34 of 36 15:42:22 15:42:22 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none