Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


14 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
da00a8e7a1
[Firefox:11 hits: 08-05 to 09-13]
f685f8e027
[Firefox:15 hits: 06-18 to 09-13]		 none[none]
f685f8e027[1]		 Win2K-f 28 of 33 08:34:13 08:34:13 1 none none:none
ASM:Graph
 none|none
Armadillo|		 48% none
lines=82		 none
trace
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
73f1082158
[Firefox:1034 hits: 06-18 to 09-13]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 05:01:59 23:44:19 11 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2851817490
[Firefox: 5 hits: 06-27 to 08-25]		 none[none] Win2K-f 32 of 33 23:27:39 23:27:39 1 none none:none
 none|none none none
22999be88c
[Firefox:16 hits: 04-05 to 09-12]		 eda2056971 [0] WinXP 31 of 32 08:02:52 22:06:58 2 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
c3bc53e727
NEW		 none[none] WinXP 33 of 36 18:43:11 18:43:11 1 none none:none
 none|none none none
290e2cd1fc
NEW		 none[none] WinXP 35 of 36 14:38:29 14:38:29 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]		 none[4] Win2K-f
WinXP		 33 of 33 04:02:30 23:44:19 23 none none:none
 tElock| none trace
87e1117f2a
[Firefox: 4 hits: 07-18 to 09-13]		 none[none] Win2K-f 32 of 33 02:45:58 14:35:41 2 none none:none
 none|none none none
623e0b5433
NEW		 none[none] WinXP 0 of 0 04:54:47 08:56:14 2 none none:none
 none|none none none
492957db81
[Firefox:18 hits: 01-01 to 08-19]		 064e4d7742 [0] WinXP 29 of 29 16:01:52 16:01:52 1 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
7f89b38665
[Firefox: 9 hits: 08-02 to 08-22]		 none[none] WinXP 32 of 36 07:24:00 07:24:00 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
b5919931fe
[Firefox:557 hits: 06-20 to 09-13]
b7082104e4
[Firefox:126 hits: 06-18 to 09-13]		 none[4]
b5919931fe[1]
none [4]		 Win2K-f 8 of 33 04:02:30 23:36:43 2 none none:none
ASM:Graph
none:none
 tElock|
ASProtect|
tElock|		 none
lines=90
none		 trace
trace
trace
5aeb9abc92
[Firefox:12 hits: 07-15 to 08-27]		 none[none] WinXP 26 of 32 06:25:11 06:25:11 1 none none:none
 none|none none none
0a48f71813
NEW		 none[none] WinXP 0 of 0 09:16:37 09:16:37 1 none none:none
 none|none none none
2851817490
[Firefox: 5 hits: 06-27 to 08-25]
ed4acd1f8e
[Firefox: 2 hits: 06-28 to 08-25]		 none[none]
none [none]		 Win2K-f 26 of 33 23:27:39 23:27:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:126 hits: 06-17 to 09-13]		 none[4] Win2K-f 31 of 33 12:48:07 12:48:07 1 none none:none
 tElock| none trace
7a2cad4bbc
NEW		 none[none] Win2K-f 0 of 0 13:07:08 13:07:08 1 none none:none
 none|none none none
73ce2b74da
[Firefox: 9 hits: 06-18 to 08-22]		 73ce2b74da [1] WinXP 3 of 33 03:06:31 03:06:31 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
d42c1cc7c0
[Firefox:128 hits: 01-01 to 08-27]		 af9ca5bed1 [0] WinXP 29 of 29 16:29:46 16:29:46 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
533d15b5ce
[Firefox:21 hits: 06-21 to 09-13]		 none[4] WinXP 30 of 33 05:34:23 05:34:23 1 none none:none
 tElock| none trace
a12cab51ef
[Firefox:509 hits: 01-01 to 09-13]		 40f7f463c4 [0] WinXP 29 of 29 09:10:13 18:15:01 7 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f502585714
[Firefox:40 hits: 01-02 to 08-23]		 ae590430c5 [0] WinXP 29 of 29 23:59:33 23:59:33 1 none ASM:Graph
 PolyEnE| 100% lines=63 trace
03f912899b
[Firefox:118 hits: 01-08 to 09-13]		 83893bd25d [0] WinXP 32 of 32 22:32:58 22:32:58 1 none ASM:Graph
 none|none 100% lines=65 trace
571e381ed4
NEW		 none[none] WinXP 35 of 36 12:28:42 12:28:42 1 none none:none
 none|none none none
5e0af7b8d3
NEW		 none[none] WinXP 0 of 0 12:26:25 12:26:25 1 none none:none
 none|none none none
17ff76e844
NEW		 none[none] WinXP 0 of 0 09:46:11 09:46:11 1 none none:none
 none|none none none
168aab35a3
[Firefox:126 hits: 06-17 to 09-13]
4c3df24b32
[Firefox:180 hits: 06-17 to 09-13]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 12:48:07 12:48:07 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3ed16ae12d
[Firefox:17 hits: 06-19 to 08-29]		 3ed16ae12d [1] WinXP 3 of 33 05:32:44 05:32:44 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
6528697102
NEW		 none[none] Win2K-f 0 of 0 19:27:28 19:27:28 1 none none:none
 none|none none none
741e3b03b3
[Firefox:350 hits: 01-05 to 09-13]		 e0197e8a64 [0] WinXP 31 of 32 10:55:43 18:22:02 4 none ASM:Graph
 none|none 100% lines=62 trace
2f27f1f3ed
NEW
b5919931fe
[Firefox:557 hits: 06-20 to 09-13]
baa7256c07
NEW		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 33 of 36 04:55:43 04:55:43 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
2f27f1f3ed
NEW		 none[none] Win2K-f 34 of 36 04:55:43 04:55:43 1 none none:none
 none|none none none
75cf39cba2
[Firefox: 2 hits: 09-12 to 09-12]		 none[none] WinXP 35 of 36 13:35:14 13:35:18 2 none none:none
 none|none none none
76aa373574
NEW		 none[none] WinXP 36 of 36 07:53:31 18:11:10 2 none none:none
 none|none none none
831f4ee0a7
[Firefox:531 hits: 01-01 to 09-13]		 eb7546c600 [0] WinXP 29 of 29 05:59:22 05:59:22 1 none ASM:Graph
 none|none 100% lines=61 trace
fef4447761
NEW		 none[none] Win2K-f 0 of 0 01:19:05 01:19:05 1 none none:none
 none|none none none
e5308455e5
NEW		 none[none] WinXP 0 of 0 19:42:51 19:42:51 1 none none:none
 none|none none none
533d15b5ce
[Firefox:21 hits: 06-21 to 09-13]
58c343a8d8
[Firefox:23 hits: 06-21 to 09-13]		 none[4]
58c343a8d8[1]		 WinXP 28 of 33 05:34:23 05:34:23 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
222cf9c83d
NEW		 none[none] WinXP 0 of 0 02:46:29 02:46:29 1 none none:none
 none|none none none
039e3fa376
[Firefox: 3 hits: 07-24 to 08-19]
76f2c59ef8
[Firefox: 3 hits: 07-24 to 08-19]		 none[none]
none [none]		 Win2K-f 31 of 35 00:34:21 00:34:21 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
aea0211ea9
NEW		 none[none] WinXP 0 of 0 08:16:54 08:16:54 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
b5919931fe
[Firefox:557 hits: 06-20 to 09-13]		 none[4]
b5919931fe[1]		 Win2K-f 0 of 32 04:55:43 23:36:43 6 none none:none
ASM:Graph
 tElock|
ASProtect|		 48% none
lines=90		 trace
trace
7bece71bb1
NEW		 none[none] WinXP 0 of 0 10:57:43 10:57:45 2 none none:none
 none|none none none
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
57ce4acac2
[Firefox:176 hits: 06-17 to 09-13]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 16:02:51 16:02:51 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6df1b03604
NEW		 none[none] WinXP 33 of 36 05:11:44 05:11:44 1 none none:none
 none|none none none
039e3fa376
[Firefox: 3 hits: 07-24 to 08-19]		 none[none] Win2K-f 33 of 35 00:34:21 00:34:21 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:385 hits: 12-31 to 09-13]		 048df78048 [0] WinXP 29 of 29 07:57:10 09:28:48 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
a08f3b74a4
[Firefox:702 hits: 06-18 to 09-13]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 10:14:34 21:02:00 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b504f1f9a6
NEW		 none[none] WinXP 0 of 0 16:13:12 16:13:12 1 none none:none
 none|none none none
7f89b38665
[Firefox: 9 hits: 08-02 to 08-22]
a51a50404e
[Firefox: 9 hits: 08-02 to 08-22]		 none[none]
none [none]		 WinXP 34 of 36 07:24:00 07:24:00 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
97df2c94e6
NEW		 none[none] WinXP 0 of 0 05:03:41 05:03:41 1 none none:none
 none|none none none
6dcb69f95a
NEW		 none[none] Win2K-f 11 of 36 01:42:05 01:42:05 1 none none:none
 none|none none none
5706f2fc14
NEW
68c7a1f625
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 01:21:05 01:21:05 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
87e1117f2a
[Firefox: 4 hits: 07-18 to 09-13]
b4fe4581c3
[Firefox: 4 hits: 07-18 to 09-13]		 none[none]
none [none]		 Win2K-f 29 of 33 02:45:58 14:35:41 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6528697102
NEW
667b157f26
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 19:27:28 19:27:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b4397cd867
NEW
b455f223d6
NEW		 none[none]
b455f223d6[1]		 WinXP 27 of 32 13:15:28 13:15:28 1 none none:none
ASM:Graph
 none|none
Armadillo|		 47% none
lines=81		 none
trace
a84ffdf670
NEW		 none[none] WinXP 0 of 0 14:27:26 14:27:26 1 none none:none
 none|none none none
75c16054ca
NEW		 none[none] WinXP 0 of 0 00:10:56 00:10:56 1 none none:none
 none|none none none
607b60ad51
[Firefox:32 hits: 06-20 to 09-13]
e5c7bce70e
[Firefox:30 hits: 06-20 to 09-13]		 none[4]
e5c7bce70e[1]		 Win2K-f 2 of 32 20:32:42 20:32:42 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
16874933ea
[Firefox:43 hits: 06-18 to 09-13]
76ee340669
[Firefox:43 hits: 06-18 to 09-13]		 16874933ea [1]
none [4]		 WinXP 33 of 33 03:06:37 03:06:37 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
3373948767
[Firefox:21 hits: 07-03 to 08-30]
c73f738c30
[Firefox:21 hits: 07-03 to 08-30]		 none[none]
none [none]		 Win2K-f 29 of 33 06:04:04 06:04:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
df17a625ee
[Firefox:230 hits: 01-01 to 08-30]		 9bbdd086c5 [0] WinXP 29 of 29 01:22:34 01:22:34 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
93dabb5a19
[Firefox: 2 hits: 07-22 to 08-02]		 none[none] WinXP 20 of 32 02:09:00 02:09:00 1 none none:none
 none|none none none
986b59708d
[Firefox:74 hits: 01-14 to 09-12]		 8a00217866 [0] WinXP 29 of 29 06:36:06 06:36:06 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
4d98c3ff39
NEW		 none[none] Win2K-f 0 of 0 05:28:54 05:28:54 1 none none:none
 none|none none none
cfe42c471f
[Firefox: 4 hits: 08-10 to 09-13]		 none[none] WinXP 31 of 35 10:04:19 10:04:19 1 none none:none
 none|none none none
16874933ea
[Firefox:43 hits: 06-18 to 09-13]		 16874933ea [1] WinXP 29 of 33 03:06:37 03:06:37 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
6df1b03604
NEW
74fa06e356
NEW		 none[none]
none [none]		 WinXP 34 of 36 05:11:44 05:11:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
87bd0a062f
[Firefox: 7 hits: 06-29 to 08-09]		 none[none] WinXP 30 of 33 19:44:02 19:44:02 1 none none:none
 none|none none none
6a786b0331
NEW		 none[none] Win2K-f 0 of 0 08:39:48 08:39:48 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2072 hits: 06-17 to 09-13]
73f1082158
[Firefox:1034 hits: 06-18 to 09-13]
e07c29c4ae
[Firefox:428 hits: 06-19 to 09-13]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 03:06:31 23:44:19 6 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
382279b44f
[Firefox:168 hits: 05-22 to 09-13]		 049e62d55b [0] Win2K-f
WinXP		 19 of 32 07:11:25 18:23:56 4 none ASM:Graph
 Armadillo| 50% lines=192 trace
6e2eaa0359
[Firefox: 7 hits: 07-10 to 08-22]
740e3bffe0
[Firefox: 8 hits: 06-25 to 08-22]		 none[none]
none [none]		 Win2K-f 24 of 33 14:46:24 14:46:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
02b1d27c8f
NEW		 none[none] Win2K-f 0 of 0 01:43:33 01:43:33 1 none none:none
 none|none none none
3cd7958258
[Firefox:23 hits: 06-17 to 09-13]		 none[4] WinXP 30 of 33 10:16:26 10:16:26 1 none none:none
 tElock| none trace
222cf9c83d
NEW
aa55cb3240
NEW		 none[none]
none [none]		 WinXP 0 of 0 02:46:29 02:46:29 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:533 hits: 12-31 to 09-13]		 1aad8e4632 [0] WinXP 25 of 25 02:09:03 15:28:55 4 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
6e2eaa0359
[Firefox: 7 hits: 07-10 to 08-22]		 none[none] Win2K-f 31 of 33 14:46:24 14:46:24 1 none none:none
 none|none none none
ed7d5d9ce7
[Firefox: 2 hits: 08-26 to 08-29]		 none[none] WinXP 33 of 36 05:02:25 05:02:25 1 none none:none
 none|none none none
3cd7958258
[Firefox:23 hits: 06-17 to 09-13]
41efedf70f
[Firefox:22 hits: 06-19 to 09-13]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 10:16:26 10:16:26 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3373948767
[Firefox:21 hits: 07-03 to 08-30]		 none[none] Win2K-f 30 of 33 06:04:04 06:04:04 1 none none:none
 none|none none none
da00a8e7a1
[Firefox:11 hits: 08-05 to 09-13]		 none[none] Win2K-f 34 of 36 08:34:13 08:34:13 1 none none:none
 none|none none none
3ed16ae12d
[Firefox:17 hits: 06-19 to 08-29]
79c01ec060
[Firefox:29 hits: 06-18 to 08-29]		 3ed16ae12d [1]
none [4]		 WinXP 33 of 33 03:06:31 05:32:44 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:1057 hits: 12-31 to 09-13]		 7a70e1b592 [0] WinXP 26 of 28 02:12:26 20:40:46 11 none ASM:Graph
 PolyEnE| 99% lines=68 trace
6cf11d6364
NEW		 none[none] WinXP 36 of 36 09:41:49 09:41:49 1 none none:none
 none|none none none
62cfe21240
NEW
b99badda6e
NEW		 none[none]
none [none]		 Win2K-f 32 of 33 22:08:17 22:08:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
abfc1b573e
NEW		 none[none] WinXP 0 of 0 22:49:33 22:49:33 1 none none:none
 none|none none none
87bd0a062f
[Firefox: 7 hits: 06-29 to 08-09]
c7d6018f97
[Firefox: 7 hits: 06-29 to 08-09]		 none[none]
none [none]		 WinXP 31 of 33 19:44:02 19:44:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c9d01112a8
[Firefox: 8 hits: 08-06 to 09-13]		 none[none] WinXP 35 of 36 11:24:10 11:24:10 1 none none:none
 none|none none none
cdf8cd94a9
NEW		 none[none] WinXP 35 of 36 14:54:11 14:54:11 1 none none:none
 none|none none none
b4397cd867
NEW		 none[none] WinXP 34 of 36 13:15:28 13:15:28 1 none none:none
 none|none none none
c3bc2b7d23
NEW		 none[none] Win2K-f 0 of 0 02:39:58 02:39:58 1 none none:none
 none|none none none
607b60ad51
[Firefox:32 hits: 06-20 to 09-13]		 none[4] Win2K-f 31 of 32 20:32:42 20:32:42 1 none none:none
 tElock| none trace
62cfe21240
NEW		 none[none] Win2K-f 29 of 33 22:08:17 22:08:17 1 none none:none
 none|none none none
5706f2fc14
NEW		 none[none] Win2K-f 33 of 36 01:21:05 01:21:05 1 none none:none
 none|none none none