Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


27 August 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
adb51c8017
NEW		 none[none] WinXP 35 of 36 10:03:18 10:03:18 1 none none:none
 none|none none none
3b2958417b
[Firefox: 8 hits: 07-09 to 08-13]		 none[none] WinXP 33 of 33 08:27:49 08:27:49 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]
73f1082158
[Firefox:945 hits: 06-18 to 08-26]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:16:47 22:47:41 19 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox:14 hits: 04-05 to 08-21]		 eda2056971 [0] WinXP 31 of 32 01:27:19 01:27:19 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]		 none[4] WinXP
Win2K-f		 33 of 33 00:16:47 22:47:41 34 none none:none
 tElock| none trace
3f0a5b2ebe
[Firefox:16 hits: 06-18 to 08-25]
c6bfb5f0f2
[Firefox:16 hits: 06-18 to 08-25]		 none[4]
c6bfb5f0f2[1]		 Win2K-f 28 of 32 02:53:32 02:53:32 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
6b9d32677d
NEW		 none[none] WinXP 26 of 36 18:27:18 18:27:18 1 none none:none
 none|none none none
9bc67c754e
[Firefox: 4 hits: 06-28 to 08-23]		 none[none] Win2K-f 28 of 32 22:33:55 22:33:55 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]
b7082104e4
[Firefox:116 hits: 06-18 to 08-25]		 none[4]
none [4]		 Win2K-f 8 of 33 13:50:47 13:50:47 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
5aeb9abc92
[Firefox:11 hits: 07-15 to 08-24]		 none[none] WinXP 26 of 32 13:35:26 13:35:26 1 none none:none
 none|none none none
0cfbeb0f6d
NEW
6f88847c49
[Firefox: 3 hits: 06-25 to 07-25]		 none[none]
none [none]		 Win2K-f 29 of 33 04:03:40 04:03:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:174 hits: 06-17 to 08-26]
8390780c27
[Firefox:35 hits: 06-18 to 08-18]		 4c3df24b32 [1]
none [4]		 Win2K-f 30 of 32 12:11:39 12:11:39 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
168aab35a3
[Firefox:120 hits: 06-17 to 08-26]		 none[4] WinXP 31 of 33 13:15:56 19:18:00 2 none none:none
 tElock| none trace
19b04193aa
NEW
d869c82fb8
NEW
e8d4d8cde1
[Firefox:528 hits: 03-31 to 08-26]		 none[none]
none [none]
fda109a6fd[0]		 WinXP
Win2K-f		 13 of 31 16:10:39 19:10:36 43 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 64% none
none
lines=583
embedded dns		 none
none
trace
d42c1cc7c0
[Firefox:127 hits: 01-01 to 08-22]		 af9ca5bed1 [0] WinXP 29 of 29 12:19:52 12:19:52 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
6d7cb00d2f
NEW
a12cab51ef
[Firefox:492 hits: 01-01 to 08-26]		 none[none]
40f7f463c4[0]		 WinXP 29 of 29 04:49:11 22:28:35 3 none none:none
ASM:Graph
 none|none
ASPack|		 54% none
lines=281
embedded dns		 none
trace
2bc347d52d
[Firefox: 4 hits: 08-04 to 08-19]		 none[none] WinXP 32 of 36 21:50:01 21:50:01 1 none none:none
 none|none none none
03f912899b
[Firefox:107 hits: 01-08 to 08-26]		 83893bd25d [0] WinXP 32 of 32 04:32:55 10:00:47 2 none ASM:Graph
 none|none 100% lines=65 trace
00b268f5a1
NEW		 none[none] WinXP 35 of 35 06:55:30 15:59:01 2 none none:none
 none|none none none
7b1a3bf102
NEW		 none[none] WinXP 35 of 36 12:03:33 12:03:33 1 none none:none
 none|none none none
168aab35a3
[Firefox:120 hits: 06-17 to 08-26]
4c3df24b32
[Firefox:174 hits: 06-17 to 08-26]		 none[4]
4c3df24b32[1]		 Win2K-f
WinXP		 0 of 33 02:49:24 13:15:56 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3ed16ae12d
[Firefox:15 hits: 06-19 to 08-24]		 3ed16ae12d [1] Win2K-f 3 of 33 03:14:07 03:14:07 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
168aab35a3
[Firefox:120 hits: 06-17 to 08-26]
667f0c59f3
[Firefox:20 hits: 07-04 to 08-25]		 none[4]
none [none]		 WinXP 31 of 33 19:18:00 19:18:00 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:338 hits: 01-05 to 08-26]		 e0197e8a64 [0] WinXP 31 of 32 02:16:02 23:06:09 4 none ASM:Graph
 none|none 100% lines=62 trace
b7a2b9be2a
NEW		 none[none] WinXP 36 of 36 01:31:30 01:31:30 1 none none:none
 none|none none none
c8891a31bc
NEW		 none[none] WinXP 35 of 36 23:06:41 23:06:41 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:515 hits: 01-01 to 08-25]		 eb7546c600 [0] WinXP 29 of 29 04:57:44 12:26:21 3 none ASM:Graph
 none|none 100% lines=61 trace
3f0a5b2ebe
[Firefox:16 hits: 06-18 to 08-25]		 none[4] Win2K-f 32 of 33 02:53:32 02:53:32 1 none none:none
 PolyEnE| none trace
17028f1eda
[Firefox:28 hits: 04-18 to 08-26]		 none[3] WinXP 31 of 32 21:43:34 21:43:34 1 none none:none
 tElock| none trace
607b60ad51
[Firefox:29 hits: 06-20 to 08-26]
9b6b16824e
NEW		 none[4]
none [none]		 Win2K-f 32 of 36 13:17:47 13:17:47 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]
73f1082158
[Firefox:945 hits: 06-18 to 08-26]
b5919931fe
[Firefox:482 hits: 06-20 to 08-26]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 01:58:06 22:47:41 8 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
bfec7d0b0b
[Firefox:10 hits: 08-06 to 08-24]		 none[none] WinXP 35 of 36 12:38:43 12:38:43 1 none none:none
 none|none none none
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]
57ce4acac2
[Firefox:153 hits: 06-17 to 08-26]		 none[4]
57ce4acac2[1]		 Win2K-f
WinXP		 0 of 33 01:58:06 22:44:57 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1a2c0e6130
[Firefox:373 hits: 12-31 to 08-26]		 048df78048 [0] WinXP 29 of 29 11:50:40 11:50:40 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:1888 hits: 06-17 to 08-26]
a08f3b74a4
[Firefox:637 hits: 06-18 to 08-26]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 02:20:55 21:41:43 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a12b896387
[Firefox: 4 hits: 07-29 to 08-18]		 none[none] WinXP 33 of 35 17:09:18 17:09:18 1 none none:none
 none|none none none
7a92de9194
NEW		 none[none] WinXP 36 of 36 12:37:28 12:37:28 1 none none:none
 none|none none none
46c0f62e56
NEW		 none[none] WinXP 34 of 35 04:12:47 04:12:47 1 none none:none
 none|none none none
3874ef05b8
[Firefox: 2 hits: 07-23 to 08-17]		 none[none] WinXP 35 of 35 21:22:41 21:22:41 1 none none:none
 none|none none none
8ae058b2d0
[Firefox:11 hits: 05-01 to 08-21]		 e6a9383b75 [0] WinXP 30 of 32 14:07:07 14:07:07 1 none ASM:Graph
 none|none 97% lines=59 trace
19b04193aa
NEW
d869c82fb8
NEW		 none[none]
none [none]		 Win2K-f 11 of 36 19:10:36 19:10:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6d7cb00d2f
NEW		 none[none] WinXP 0 of 36 22:28:35 22:28:35 1 none none:none
 none|none none none
19b04193aa
NEW		 none[none] Win2K-f 11 of 36 19:10:36 19:10:36 1 none none:none
 none|none none none
8a75955033
[Firefox:30 hits: 06-20 to 08-25]
9276c8b36b
[Firefox:30 hits: 06-20 to 08-25]		 none[4]
9276c8b36b[1]		 WinXP 28 of 32 00:35:43 00:35:43 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
d175bad0e6
[Firefox: 5 hits: 04-05 to 08-12]		 dfb15f5463 [0] WinXP 29 of 29 20:04:08 20:04:08 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
df17a625ee
[Firefox:226 hits: 01-01 to 08-25]		 9bbdd086c5 [0] WinXP 29 of 29 06:56:18 06:56:18 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
67fe4d80c3
NEW		 none[none] WinXP 35 of 36 07:36:16 07:36:16 1 none none:none
 none|none none none
0cfbeb0f6d
NEW		 none[none] Win2K-f 35 of 36 04:03:40 04:03:40 1 none none:none
 none|none none none
168aab35a3
[Firefox:120 hits: 06-17 to 08-26]
667f0c59f3
[Firefox:20 hits: 07-04 to 08-25]
e07c29c4ae
[Firefox:376 hits: 06-19 to 08-26]		 none[4]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 00:16:47 19:18:00 7 none none:none
none:none
ASM:Graph
 tElock|
none|none
FSG|		 48% none
none
lines=92		 trace
none
trace
8a75955033
[Firefox:30 hits: 06-20 to 08-25]		 none[4] WinXP 29 of 32 00:35:43 00:35:43 1 none none:none
 tElock| none trace
7f60162c2c
[Firefox:513 hits: 12-31 to 08-26]		 1aad8e4632 [0] WinXP 25 of 25 08:03:36 19:00:37 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:28 hits: 07-28 to 08-25]		 none[none] WinXP 35 of 35 08:57:33 08:57:59 2 none none:none
 none|none none none
3ae357d17b
[Firefox:169 hits: 01-01 to 08-26]		 462a7be171 [0] WinXP 29 of 29 16:09:31 16:09:31 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
a219ed3aeb
[Firefox:18 hits: 08-02 to 08-26]		 none[none] WinXP 36 of 36 19:19:19 19:19:19 1 none none:none
 none|none none none
3ed16ae12d
[Firefox:15 hits: 06-19 to 08-24]
79c01ec060
[Firefox:26 hits: 06-18 to 08-24]		 3ed16ae12d [1]
none [4]		 Win2K-f 33 of 33 03:14:07 03:14:07 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:1034 hits: 12-31 to 08-26]		 7a70e1b592 [0] WinXP 26 of 28 15:01:51 15:01:51 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
54f5031c41
[Firefox: 3 hits: 03-03 to 08-05]		 18557d626e [0] WinXP 30 of 32 23:06:07 23:06:07 1 none ASM:Graph
 ASPack| 94% lines=34 trace
4c27e2165f
NEW		 none[4] WinXP 29 of 29 21:24:10 21:24:10 1 none none:none
 PolyEnE| none trace
cbed160690
NEW		 none[none] Win2K-f 34 of 36 16:41:15 16:41:15 1 none none:none
 none|none none none
57c01c2c84
NEW		 none[none] WinXP 25 of 36 18:03:27 18:03:27 1 none none:none
 none|none none none
df2f0e165e
[Firefox: 3 hits: 08-24 to 08-25]		 none[none] WinXP 35 of 35 04:59:55 15:30:55 2 none none:none
 none|none none none
607b60ad51
[Firefox:29 hits: 06-20 to 08-26]		 none[4] Win2K-f 31 of 32 13:17:47 13:17:47 1 none none:none
 tElock| none trace
50af665692
NEW		 none[4] WinXP 33 of 33 09:23:37 09:23:37 1 none none:none
 PolyEnE| none trace
a12cab51ef
[Firefox:492 hits: 01-01 to 08-26]
cc5c59d4df
NEW		 40f7f463c4 [0]
none [none]		 WinXP 0 of 36 04:49:11 04:49:11 1 none ASM:Graph
none:none
 ASPack|
none|none		 lines=281
embedded dns
none		 trace
none