Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


15 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
da00a8e7a1
[Firefox:12 hits: 08-05 to 09-14]
e07c29c4ae
[Firefox:434 hits: 06-19 to 09-14]
f685f8e027
[Firefox:16 hits: 06-18 to 09-14]		 none[none]
e07c29c4ae[1]
f685f8e027[1]		 WinXP 28 of 33 20:18:04 20:18:04 1 none none:none
ASM:Graph
ASM:Graph
 none|none
FSG|
Armadillo|		 48% none
lines=92
lines=82		 none
trace
trace
75b1decfa8
NEW		 none[none] WinXP 35 of 36 14:46:16 14:46:16 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]
73f1082158
[Firefox:1045 hits: 06-18 to 09-14]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:52:13 22:12:53 22 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
f190da6fbe
[Firefox:26 hits: 01-02 to 08-23]		 d8dc6af14c [0] WinXP 27 of 32 02:26:21 02:26:21 1 none ASM:Graph
 PolyEnE| 100% lines=68 trace
c3bc53e727
NEW		 none[none] WinXP 33 of 36 05:37:45 05:37:45 1 none none:none
 none|none none none
1fcc146d70
[Firefox:35 hits: 01-02 to 08-29]		 258fafe892 [0] WinXP 29 of 29 18:51:42 18:51:42 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
d37d58322a
NEW
f4a5378d44
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 04:39:04 04:39:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]		 none[4] WinXP
Win2K-f		 33 of 33 00:52:13 22:19:15 38 none none:none
 tElock| none trace
0115338c8b
NEW		 none[none] Win2K-f
WinXP		 33 of 36 05:23:20 12:10:00 2 none none:none
 none|none none none
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]
b7082104e4
[Firefox:128 hits: 06-18 to 09-14]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 07:02:58 14:31:39 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
27aab4187c
NEW
3cd1361df4
NEW
a65dda48ec
NEW
bd1d52b9c3
NEW
c025f08a76
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 10 of 36 00:11:17 00:11:17 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
5378ab9d2d
[Firefox: 5 hits: 06-28 to 08-13]		 none[none] WinXP 31 of 32 21:11:08 21:11:08 1 none none:none
 none|none none none
27aab4187c
NEW
3cd1361df4
NEW		 none[none]
none [none]		 Win2K-f 16 of 36 00:11:17 00:11:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
27aab4187c
NEW
3cd1361df4
NEW
a65dda48ec
NEW		 none[none]
none [none]
none [none]		 Win2K-f 20 of 36 00:11:17 00:11:17 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
168aab35a3
[Firefox:127 hits: 06-17 to 09-14]		 none[4] Win2K-f 31 of 33 23:42:56 23:42:56 1 none none:none
 tElock| none trace
27aab4187c
NEW		 none[none] Win2K-f 19 of 36 00:11:17 00:11:17 1 none none:none
 none|none none none
73ce2b74da
[Firefox:10 hits: 06-18 to 09-14]		 73ce2b74da [1] Win2K-f
WinXP		 3 of 33 12:36:32 21:09:12 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
475d9a7753
[Firefox: 2 hits: 06-22 to 07-26]		 none[4] Win2K-f 30 of 32 07:20:12 07:20:12 1 none none:none
 tElock| none trace
a12cab51ef
[Firefox:516 hits: 01-01 to 09-14]		 40f7f463c4 [0] WinXP 29 of 29 09:18:21 17:23:49 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
1b94c1cc14
[Firefox: 7 hits: 07-01 to 08-19]		 none[none] Win2K-f 31 of 33 04:56:47 04:56:47 1 none none:none
 none|none none none
83959d63ea
NEW		 none[none] WinXP 35 of 36 18:10:01 18:10:01 1 none none:none
 none|none none none
03f912899b
[Firefox:119 hits: 01-08 to 09-14]		 83893bd25d [0] WinXP 32 of 32 13:03:06 13:03:06 1 none ASM:Graph
 none|none 100% lines=65 trace
d37d58322a
NEW		 none[none] Win2K-f 32 of 36 04:39:04 04:39:04 1 none none:none
 none|none none none
571e381ed4
NEW		 none[none] WinXP 35 of 36 22:18:01 22:18:06 2 none none:none
 none|none none none
4c3df24b32
[Firefox:181 hits: 06-17 to 09-14]		 4c3df24b32 [1] WinXP
Win2K-f		 0 of 33 06:39:21 13:33:32 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
686d4ca67b
[Firefox: 5 hits: 07-08 to 08-26]
b7e379b157
[Firefox: 5 hits: 07-08 to 08-26]		 none[none]
none [none]		 WinXP 29 of 33 17:19:46 17:26:13 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3ed16ae12d
[Firefox:18 hits: 06-19 to 09-14]		 3ed16ae12d [1] WinXP 3 of 33 10:22:37 16:02:01 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
68cd473638
[Firefox: 2 hits: 08-22 to 09-12]		 none[none] WinXP 22 of 32 15:35:14 15:35:14 1 none none:none
 none|none none none
741e3b03b3
[Firefox:354 hits: 01-05 to 09-14]		 e0197e8a64 [0] WinXP 31 of 32 04:15:39 21:37:54 6 none ASM:Graph
 none|none 100% lines=62 trace
75cf39cba2
[Firefox: 4 hits: 09-12 to 09-14]		 none[none] WinXP 35 of 36 09:26:36 09:26:36 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:532 hits: 01-01 to 09-14]		 eb7546c600 [0] WinXP 29 of 29 03:12:57 05:02:20 2 none ASM:Graph
 none|none 100% lines=61 trace
eec7cce07c
[Firefox: 4 hits: 08-15 to 08-29]		 none[none] WinXP 29 of 29 02:31:20 02:31:20 1 none none:none
 none|none none none
920a658efb
NEW		 none[none] WinXP 34 of 36 12:30:15 12:30:15 1 none none:none
 none|none none none
17028f1eda
[Firefox:29 hits: 04-18 to 08-27]		 none[3] WinXP 31 of 32 01:43:01 10:52:53 4 none none:none
 tElock| none trace
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]
73f1082158
[Firefox:1045 hits: 06-18 to 09-14]
b5919931fe
[Firefox:563 hits: 06-20 to 09-14]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 03:43:47 22:12:53 8 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
7b2dec4d44
[Firefox: 2 hits: 06-21 to 08-24]		 7b2dec4d44 [1] Win2K-f 1 of 33 23:58:45 23:58:45 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
2204fd4d17
NEW		 none[none] Win2K-f 35 of 36 14:18:09 19:44:14 2 none none:none
 none|none none none
93385541f3
[Firefox:24 hits: 06-22 to 09-13]		 none[4] WinXP 32 of 32 07:57:59 20:38:50 2 none none:none
 none|none none trace
0115338c8b
NEW
321f4fc27d
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 31 of 36 05:23:20 12:10:00 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a23220b55e
NEW		 none[none] WinXP 27 of 36 18:08:08 18:08:08 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]
57ce4acac2
[Firefox:177 hits: 06-17 to 09-14]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 11:40:54 16:36:03 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6ec2a8994b
[Firefox:20 hits: 06-18 to 08-30]
bcf66a38c8
[Firefox: 7 hits: 07-30 to 08-30]		 none[4]
none [none]		 WinXP 2 of 35 08:29:02 08:29:02 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
1a2c0e6130
[Firefox:387 hits: 12-31 to 09-14]		 048df78048 [0] WinXP 29 of 29 19:58:47 19:58:47 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2095 hits: 06-17 to 09-14]
a08f3b74a4
[Firefox:712 hits: 06-18 to 09-14]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 03:43:47 22:19:15 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
NEW		 none[none] WinXP 36 of 36 17:33:05 17:33:05 1 none none:none
 none|none none none
18c7040ea0
NEW		 none[none] WinXP 34 of 36 16:44:43 16:44:43 1 none none:none
 none|none none none
65494b4a08
[Firefox: 5 hits: 06-29 to 09-12]		 none[none] Win2K-f 30 of 33 22:56:41 22:56:41 1 none none:none
 none|none none none
90b5d8e9aa
NEW		 none[none] Win2K-f 34 of 36 07:58:16 07:58:16 1 none none:none
 none|none none none
017226a316
[Firefox: 7 hits: 07-27 to 09-12]		 none[none] WinXP 33 of 35 07:43:03 07:43:03 1 none none:none
 none|none none none
27fce8cf02
NEW		 none[none] WinXP 35 of 36 00:26:51 00:26:51 1 none none:none
 none|none none none
3a813df3ed
[Firefox: 6 hits: 02-04 to 08-24]		 7759abbf55 [0] WinXP 28 of 29 09:58:50 09:58:50 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
ba6f48b79a
NEW		 none[none] WinXP 34 of 36 07:23:55 20:01:18 3 none none:none
 none|none none none
be4b2d7742
NEW		 none[none] WinXP 34 of 36 05:17:37 05:17:37 1 none none:none
 none|none none none
7b2dec4d44
[Firefox: 2 hits: 06-21 to 08-24]
f3d5574c1e
NEW		 7b2dec4d44 [1]
none [none]		 Win2K-f 35 of 36 23:58:45 23:58:45 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
d5447df949
NEW		 none[none] WinXP 35 of 36 18:34:55 18:34:55 1 none none:none
 none|none none none
9335b705d0
NEW
d43a1e42d2
NEW		 none[none]
none [none]		 WinXP 35 of 36 06:51:51 06:51:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c380ec506e
NEW		 none[none] WinXP 34 of 36 17:55:23 17:55:24 2 none none:none
 none|none none none
2d76ff4e53
[Firefox: 8 hits: 07-23 to 08-24]		 none[none] Win2K-f 34 of 35 11:01:39 11:01:39 1 none none:none
 none|none none none
686d4ca67b
[Firefox: 5 hits: 07-08 to 08-26]		 none[none] WinXP 32 of 33 17:19:46 17:26:13 2 none none:none
 none|none none none
75c16054ca
NEW		 none[none] WinXP 34 of 36 02:23:14 02:23:14 1 none none:none
 none|none none none
e5c7bce70e
[Firefox:31 hits: 06-20 to 09-14]		 e5c7bce70e [1] Win2K-f 2 of 32 18:57:27 18:57:27 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
168aab35a3
[Firefox:127 hits: 06-17 to 09-14]
f7738e7352
[Firefox: 4 hits: 07-25 to 08-15]		 none[4]
none [none]		 Win2K-f 33 of 35 23:42:56 23:42:56 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
017226a316
[Firefox: 7 hits: 07-27 to 09-12]
9b03689ec5
[Firefox: 7 hits: 07-27 to 09-12]		 none[none]
none [none]		 WinXP 30 of 35 07:43:03 07:43:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
561664c30b
NEW		 none[none] WinXP 35 of 36 13:37:31 13:37:31 1 none none:none
 none|none none none
6ec2a8994b
[Firefox:20 hits: 06-18 to 08-30]		 none[4] WinXP 30 of 33 08:29:02 08:29:02 1 none none:none
 tElock| none trace
2204fd4d17
NEW
eb0857e1b1
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 14:18:09 19:44:14 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1b94c1cc14
[Firefox: 7 hits: 07-01 to 08-19]
62728ad1cd
[Firefox: 7 hits: 07-01 to 08-19]		 none[none]
none [none]		 Win2K-f 29 of 33 04:56:47 04:56:47 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c05385e600
[Firefox:12 hits: 01-20 to 08-15]		 6a383b021d [0] WinXP 29 of 29 08:48:28 08:48:28 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
65494b4a08
[Firefox: 5 hits: 06-29 to 09-12]
eeb51a6e9e
[Firefox: 5 hits: 06-29 to 09-12]		 none[none]
none [none]		 Win2K-f 29 of 33 22:56:41 22:56:41 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1bb75fcc4b
NEW		 none[none] WinXP 36 of 36 09:50:36 09:50:36 1 none none:none
 none|none none none
77bf3c6d25
NEW
88fd020726
NEW		 none[none]
none [none]		 Win2K-f 33 of 35 02:47:08 02:47:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a9cfbd1b0c
[Firefox: 2 hits: 09-12 to 09-13]		 none[none] WinXP 36 of 36 05:14:44 09:46:55 3 none none:none
 none|none none none
da00a8e7a1
[Firefox:12 hits: 08-05 to 09-14]
e07c29c4ae
[Firefox:434 hits: 06-19 to 09-14]		 none[none]
e07c29c4ae[1]		 WinXP 0 of 33 00:52:13 20:18:04 10 none none:none
ASM:Graph
 none|none
FSG|		 48% none
lines=92		 none
trace
ca47a36342
[Firefox: 5 hits: 02-16 to 08-30]		 c3a58f69c6 [0] WinXP 26 of 28 21:11:39 21:11:39 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
eca9a5fa95
[Firefox: 7 hits: 08-09 to 09-13]		 none[none] WinXP 36 of 36 13:34:35 13:57:35 2 none none:none
 none|none none none
d9c778eaa4
NEW		 none[none] WinXP 35 of 36 18:57:35 18:57:35 1 none none:none
 none|none none none
49d6cdaab4
NEW		 none[none] WinXP 34 of 36 06:33:15 06:33:15 1 none none:none
 none|none none none
e13ea75c5a
NEW		 none[none] WinXP 32 of 36 22:53:14 22:53:14 1 none none:none
 none|none none none
13003605cc
NEW		 none[none] WinXP 0 of 0 13:52:21 13:52:21 1 none none:none
 none|none none none
d175563b7f
NEW		 none[none] WinXP 33 of 36 01:40:51 01:40:51 1 none none:none
 none|none none none
7f60162c2c
[Firefox:537 hits: 12-31 to 09-14]		 1aad8e4632 [0] WinXP 25 of 25 10:02:03 17:22:10 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:31 hits: 07-28 to 08-30]		 none[none] WinXP 35 of 35 23:03:04 23:03:04 1 none none:none
 none|none none none
776985f561
[Firefox:10 hits: 06-24 to 09-12]		 776985f561 [1] Win2K-f 31 of 33 18:49:41 18:49:41 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
e9ee0d4d34
NEW		 none[none] WinXP 24 of 36 07:26:21 07:26:21 1 none none:none
 none|none none none
f0b49cdcfc
[Firefox:14 hits: 07-04 to 09-13]		 none[none] WinXP 33 of 33 05:26:08 05:26:08 1 none none:none
 none|none none none
3ae357d17b
[Firefox:172 hits: 01-01 to 09-12]		 462a7be171 [0] WinXP 29 of 29 19:10:42 19:10:42 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
da00a8e7a1
[Firefox:12 hits: 08-05 to 09-14]		 none[none] WinXP 34 of 36 20:18:04 20:18:04 1 none none:none
 none|none none none
c4dd51ff9c
NEW		 none[none] WinXP 34 of 36 12:32:38 12:32:38 1 none none:none
 none|none none none
5dd1895896
NEW		 none[none] Win2K-f 32 of 36 17:37:44 17:37:44 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1068 hits: 12-31 to 09-14]		 7a70e1b592 [0] WinXP 26 of 28 02:20:25 16:53:01 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
6cf11d6364
[Firefox: 2 hits: 09-12 to 09-14]		 none[none] WinXP 36 of 36 08:47:52 12:48:35 2 none none:none
 none|none none none
73ce2b74da
[Firefox:10 hits: 06-18 to 09-14]
79c01ec060
[Firefox:31 hits: 06-18 to 09-14]		 73ce2b74da [1]
none [4]		 WinXP
Win2K-f		 33 of 33 10:22:37 21:09:12 4 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
2d76ff4e53
[Firefox: 8 hits: 07-23 to 08-24]
7df1377ee3
[Firefox: 8 hits: 07-23 to 08-24]		 none[none]
none [none]		 Win2K-f 32 of 35 11:01:39 11:01:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
62cfe21240
[Firefox: 2 hits: 07-07 to 09-14]
b99badda6e
[Firefox: 2 hits: 07-07 to 09-14]		 none[none]
none [none]		 WinXP 32 of 33 20:28:02 20:28:02 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9335b705d0
NEW		 none[none] WinXP 32 of 36 06:51:51 06:51:51 1 none none:none
 none|none none none
1509c8d024
[Firefox:22 hits: 06-17 to 09-13]
f23b040440
[Firefox:13 hits: 06-22 to 09-13]		 none[4]
f23b040440[1]		 WinXP 30 of 32 09:45:29 09:45:29 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
00be9a9d63
NEW		 none[none] WinXP 34 of 36 11:08:01 11:08:01 1 none none:none
 none|none none none
776985f561
[Firefox:10 hits: 06-24 to 09-12]
8ec6129efe
[Firefox:10 hits: 06-24 to 09-12]		 776985f561 [1]
none [4]		 Win2K-f 31 of 33 18:49:41 18:49:41 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
1509c8d024
[Firefox:22 hits: 06-17 to 09-13]		 none[4] WinXP 31 of 33 09:45:29 09:45:29 1 none none:none
 tElock| none trace
cdf8cd94a9
NEW		 none[none] WinXP 35 of 36 15:46:53 15:46:53 1 none none:none
 none|none none none
4c3df24b32
[Firefox:181 hits: 06-17 to 09-14]
58408136a4
[Firefox:17 hits: 06-28 to 08-24]		 4c3df24b32 [1]
none [none]		 Win2K-f 32 of 33 13:33:32 13:33:32 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
77bf3c6d25
NEW		 none[none] Win2K-f 32 of 36 02:47:08 02:47:08 1 none none:none
 none|none none none
74c52ba45e
NEW		 none[none] WinXP 30 of 32 12:47:55 12:47:55 1 none none:none
 none|none none none
5378ab9d2d
[Firefox: 5 hits: 06-28 to 08-13]
60a6e7e23c
[Firefox: 5 hits: 06-28 to 08-13]		 none[none]
none [none]		 WinXP 29 of 33 21:11:08 21:11:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
62cfe21240
[Firefox: 2 hits: 07-07 to 09-14]		 none[none] WinXP 29 of 33 20:28:02 20:28:02 1 none none:none
 none|none none none
27aab4187c
NEW
3cd1361df4
NEW
a65dda48ec
NEW
bd1d52b9c3
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 34 of 36 00:11:17 00:11:17 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
475d9a7753
[Firefox: 2 hits: 06-22 to 07-26]
e9a7fa27d5
[Firefox: 2 hits: 06-22 to 07-26]		 none[4]
e9a7fa27d5[1]		 Win2K-f 30 of 32 07:20:12 07:20:12 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace