Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


17 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
3db2c812c0
[Firefox: 3 hits: 07-23 to 08-23]		 none[none] Win2K-f 31 of 33 13:30:51 13:30:51 1 none none:none
 none|none none none
102c8b308c
NEW
75b1decfa8
NEW		 none[none]
none [none]		 WinXP 35 of 36 15:23:10 15:23:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2178 hits: 06-17 to 09-16]
73f1082158
[Firefox:1092 hits: 06-18 to 09-16]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 01:46:15 23:57:57 16 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b5919931fe
[Firefox:581 hits: 06-20 to 09-16]
bea8cb1865
[Firefox:10 hits: 08-11 to 09-13]
fac78fde16
NEW		 b5919931fe [1]
none [none]
none [none]		 Win2K-f 35 of 36 22:22:22 22:22:22 1 none ASM:Graph
none:none
none:none
 ASProtect|
none|none
none|none		 lines=90
none
none		 trace
none
none
69ea6772a5
NEW		 none[none] WinXP 33 of 36 03:56:58 03:56:58 1 none none:none
 none|none none none
1fcc146d70
[Firefox:37 hits: 01-02 to 09-16]		 258fafe892 [0] WinXP 29 of 29 08:20:50 08:21:36 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:2178 hits: 06-17 to 09-16]		 none[4] WinXP
Win2K-f		 33 of 33 00:29:31 23:57:57 42 none none:none
 tElock| none trace
87e1117f2a
[Firefox: 6 hits: 07-18 to 09-14]		 none[none] Win2K-f 32 of 33 15:57:44 15:57:44 1 none none:none
 none|none none none
623e0b5433
[Firefox: 3 hits: 09-14 to 09-16]		 none[none] WinXP 34 of 36 17:51:11 17:51:11 1 none none:none
 none|none none none
3db2c812c0
[Firefox: 3 hits: 07-23 to 08-23]
797fdec34a
[Firefox: 3 hits: 07-23 to 08-23]		 none[none]
none [none]		 Win2K-f 30 of 35 13:30:51 13:30:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2178 hits: 06-17 to 09-16]
b7082104e4
[Firefox:132 hits: 06-18 to 09-16]		 none[4]
none [4]		 Win2K-f 8 of 33 12:37:54 15:00:33 3 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
7f89b38665
[Firefox:10 hits: 08-02 to 09-14]		 none[none] Win2K-f 32 of 36 00:42:38 00:42:38 1 none none:none
 none|none none none
9e4ccec7e5
[Firefox: 5 hits: 08-19 to 09-13]		 none[none] WinXP 36 of 36 18:00:49 18:00:52 2 none none:none
 none|none none none
284f4c82ba
NEW
2a0ee3c795
[Firefox: 4 hits: 09-13 to 09-13]		 none[none]
none [none]		 Win2K-f 27 of 36 13:13:42 13:13:42 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:128 hits: 06-17 to 09-15]		 none[4] WinXP 31 of 33 08:34:51 16:03:13 2 none none:none
 tElock| none trace
284f4c82ba
NEW		 none[none] Win2K-f 11 of 36 13:13:42 13:13:42 1 none none:none
 none|none none none
a12cab51ef
[Firefox:521 hits: 01-01 to 09-16]		 40f7f463c4 [0] WinXP 29 of 29 05:21:53 05:21:53 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
03f912899b
[Firefox:124 hits: 01-08 to 09-16]		 83893bd25d [0] WinXP 32 of 32 03:08:05 03:08:05 1 none ASM:Graph
 none|none 100% lines=65 trace
7dd1fe2970
[Firefox:18 hits: 02-03 to 08-19]		 dcc673c815 [0] WinXP 30 of 32 02:27:02 02:27:02 1 none ASM:Graph
 ASPack| 72% lines=374
embedded dns		 trace
571e381ed4
[Firefox: 4 hits: 09-14 to 09-16]		 none[none] WinXP 35 of 36 11:03:07 19:25:56 3 none none:none
 none|none none none
3ed16ae12d
[Firefox:20 hits: 06-19 to 09-15]		 3ed16ae12d [1] Win2K-f 3 of 33 22:32:36 22:32:36 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
bcc96fab23
NEW		 none[none] WinXP 35 of 36 08:29:23 08:29:23 1 none none:none
 none|none none none
168aab35a3
[Firefox:128 hits: 06-17 to 09-15]
667f0c59f3
[Firefox:22 hits: 07-04 to 08-30]		 none[4]
none [none]		 WinXP 31 of 33 16:03:13 16:03:13 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:363 hits: 01-05 to 09-16]		 e0197e8a64 [0] WinXP 31 of 32 03:29:06 17:49:12 4 none ASM:Graph
 none|none 100% lines=62 trace
f353d4eed9
NEW		 none[none] WinXP 35 of 36 01:00:55 01:00:55 1 none none:none
 none|none none none
b5919931fe
[Firefox:581 hits: 06-20 to 09-16]
bea8cb1865
[Firefox:10 hits: 08-11 to 09-13]		 b5919931fe [1]
none [none]		 Win2K-f 32 of 36 22:22:22 22:22:22 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
831f4ee0a7
[Firefox:536 hits: 01-01 to 09-16]		 eb7546c600 [0] WinXP 29 of 29 06:42:05 12:00:35 2 none ASM:Graph
 none|none 100% lines=61 trace
5706f2fc14
NEW
68c7a1f625
NEW
b5919931fe
[Firefox:581 hits: 06-20 to 09-16]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 01:03:26 23:12:03 12 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
93385541f3
[Firefox:26 hits: 06-22 to 09-15]		 none[4] WinXP 32 of 32 07:09:49 23:51:53 2 none none:none
 none|none none trace
6ec2a8994b
[Firefox:21 hits: 06-18 to 09-15]
bcf66a38c8
[Firefox: 8 hits: 07-30 to 09-15]		 none[4]
none [none]		 Win2K-f 2 of 35 00:14:54 00:14:54 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
1a2c0e6130
[Firefox:393 hits: 12-31 to 09-16]		 048df78048 [0] WinXP 29 of 29 00:28:46 12:47:24 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2178 hits: 06-17 to 09-16]
a08f3b74a4
[Firefox:738 hits: 06-18 to 09-16]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:29:31 23:53:49 23 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
[Firefox: 3 hits: 09-13 to 09-16]		 none[none] WinXP 36 of 36 07:50:48 11:46:31 3 none none:none
 none|none none none
7f89b38665
[Firefox:10 hits: 08-02 to 09-14]
a51a50404e
[Firefox:10 hits: 08-02 to 09-14]		 none[none]
none [none]		 Win2K-f 34 of 36 00:42:38 00:42:38 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
09c3d90250
[Firefox: 6 hits: 08-04 to 09-13]
8f34a39070
[Firefox: 6 hits: 08-04 to 09-13]		 none[none]
none [none]		 WinXP 34 of 36 06:57:08 06:57:08 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
017226a316
[Firefox: 8 hits: 07-27 to 09-15]		 none[none] WinXP 33 of 35 13:54:44 13:54:44 1 none none:none
 none|none none none
5706f2fc14
NEW
68c7a1f625
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 23:12:03 23:12:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0139d7ad8
[Firefox:100 hits: 01-03 to 09-13]		 d9e9662db1 [0] WinXP 29 of 29 15:39:43 15:39:43 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
32a0d7d0e0
[Firefox:21 hits: 01-11 to 09-16]		 d791762796 [0] WinXP 29 of 29 01:43:56 01:43:56 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
f11bb34095
NEW		 none[none] WinXP 35 of 36 22:46:05 22:46:05 1 none none:none
 none|none none none
87e1117f2a
[Firefox: 6 hits: 07-18 to 09-14]
b4fe4581c3
[Firefox: 6 hits: 07-18 to 09-14]		 none[none]
none [none]		 Win2K-f 29 of 33 15:57:44 15:57:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
284f4c82ba
NEW
2a0ee3c795
[Firefox: 4 hits: 09-13 to 09-13]
3a9cc10db3
NEW		 none[none]
none [none]
none [none]		 Win2K-f 35 of 36 13:13:42 13:13:42 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
ff56970afb
NEW		 none[none] WinXP 35 of 36 12:30:20 12:30:20 1 none none:none
 none|none none none
330eaa2da2
[Firefox:18 hits: 01-28 to 08-24]		 none[3] WinXP 28 of 29 06:37:29 06:37:29 1 none none:none
 ASPack| none trace
4422cc16b4
NEW		 none[none] Win2K-f 34 of 36 07:51:31 07:51:31 1 none none:none
 none|none none none
7858181cae
[Firefox: 2 hits: 08-01 to 09-13]
ada2e3617c
[Firefox: 2 hits: 08-01 to 09-13]		 none[none]
none [none]		 Win2K-f 32 of 36 16:26:23 16:26:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
71d5528293
[Firefox: 2 hits: 09-13 to 09-16]		 none[none] WinXP 35 of 36 11:18:05 11:18:47 2 none none:none
 none|none none none
607b60ad51
[Firefox:33 hits: 06-20 to 09-14]
e5c7bce70e
[Firefox:32 hits: 06-20 to 09-15]		 none[4]
e5c7bce70e[1]		 Win2K-f 2 of 32 22:42:38 22:42:38 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
168aab35a3
[Firefox:128 hits: 06-17 to 09-15]
f7738e7352
[Firefox: 5 hits: 07-25 to 09-15]		 none[4]
none [none]		 WinXP 33 of 35 08:34:51 08:34:51 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
017226a316
[Firefox: 8 hits: 07-27 to 09-15]
9b03689ec5
[Firefox: 8 hits: 07-27 to 09-15]		 none[none]
none [none]		 WinXP 30 of 35 13:54:44 13:54:44 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
baa3b7672d
NEW		 none[none] Win2K-f 33 of 36 12:20:03 12:20:03 1 none none:none
 none|none none none
6ec2a8994b
[Firefox:21 hits: 06-18 to 09-15]		 none[4] Win2K-f 30 of 33 00:14:54 00:14:54 1 none none:none
 tElock| none trace
df17a625ee
[Firefox:233 hits: 01-01 to 09-16]		 9bbdd086c5 [0] WinXP 29 of 29 05:35:56 19:03:33 3 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
102c8b308c
NEW		 none[none] WinXP 14 of 36 15:23:10 15:23:10 1 none none:none
 none|none none none
986b59708d
[Firefox:75 hits: 01-14 to 09-14]		 8a00217866 [0] WinXP 29 of 29 07:32:38 07:32:38 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
27b945de66
[Firefox:19 hits: 06-20 to 09-13]		 none[4] WinXP 31 of 32 14:58:07 14:58:07 1 none none:none
 none|none none trace
cfe42c471f
[Firefox: 5 hits: 08-10 to 09-14]		 none[none] Win2K-f 31 of 35 01:12:35 01:12:35 1 none none:none
 none|none none none
125bd14ed4
NEW		 none[none] WinXP 34 of 36 21:30:56 21:30:56 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2178 hits: 06-17 to 09-16]
73f1082158
[Firefox:1092 hits: 06-18 to 09-16]
e07c29c4ae
[Firefox:447 hits: 06-19 to 09-16]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 06:37:20 20:49:41 8 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
eca9a5fa95
[Firefox:11 hits: 08-09 to 09-16]		 none[none] WinXP 36 of 36 22:11:33 22:55:27 3 none none:none
 none|none none none
d9c778eaa4
[Firefox: 2 hits: 09-15 to 09-16]		 none[none] WinXP 35 of 36 07:55:03 18:54:57 2 none none:none
 none|none none none
4c80ee66f2
NEW		 none[none] WinXP 33 of 36 23:36:42 23:36:42 1 none none:none
 none|none none none
7f60162c2c
[Firefox:554 hits: 12-31 to 09-16]		 1aad8e4632 [0] WinXP 25 of 25 00:28:23 20:45:29 14 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
776985f561
[Firefox:11 hits: 06-24 to 09-15]		 776985f561 [1] Win2K-f 31 of 33 17:41:43 17:41:43 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
b74e792974
[Firefox: 7 hits: 06-18 to 08-25]		 b74e792974 [1] WinXP 31 of 33 21:18:24 21:18:24 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
71b183b0c8
NEW		 none[none] WinXP 36 of 36 00:43:05 00:43:05 1 none none:none
 none|none none none
3aff9129ca
NEW		 none[none] Win2K-f 32 of 36 01:03:26 01:03:26 1 none none:none
 none|none none none
7858181cae
[Firefox: 2 hits: 08-01 to 09-13]		 none[none] Win2K-f 34 of 36 16:26:23 16:26:23 1 none none:none
 none|none none none
3ed16ae12d
[Firefox:20 hits: 06-19 to 09-15]
79c01ec060
[Firefox:35 hits: 06-18 to 09-15]		 3ed16ae12d [1]
none [4]		 Win2K-f 33 of 33 22:32:36 22:32:36 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:1084 hits: 12-31 to 09-16]		 7a70e1b592 [0] WinXP 26 of 28 04:24:03 22:35:24 14 none ASM:Graph
 PolyEnE| 99% lines=68 trace
baa3b7672d
NEW
c6db9a9ecd
NEW		 none[none]
none [none]		 Win2K-f 31 of 36 12:20:03 12:20:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
fa869e3765
NEW		 none[none] WinXP 34 of 36 10:44:27 10:44:33 2 none none:none
 none|none none none
776985f561
[Firefox:11 hits: 06-24 to 09-15]
8ec6129efe
[Firefox:11 hits: 06-24 to 09-15]		 776985f561 [1]
none [4]		 Win2K-f 31 of 33 17:41:43 17:41:43 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
b74e792974
[Firefox: 7 hits: 06-18 to 08-25]
f0e73c39a8
[Firefox: 8 hits: 06-18 to 08-25]		 b74e792974 [1]
none [4]		 WinXP 31 of 33 21:18:24 21:18:24 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
c9d01112a8
[Firefox: 9 hits: 08-06 to 09-14]		 none[none] WinXP 35 of 36 12:29:21 12:29:21 1 none none:none
 none|none none none
cdf8cd94a9
[Firefox: 4 hits: 09-14 to 09-16]		 none[none] WinXP 35 of 36 21:26:07 23:34:05 2 none none:none
 none|none none none
09c3d90250
[Firefox: 6 hits: 08-04 to 09-13]		 none[none] WinXP 32 of 36 06:57:08 06:57:08 1 none none:none
 none|none none none
607b60ad51
[Firefox:33 hits: 06-20 to 09-14]		 none[4] Win2K-f 31 of 32 22:42:38 22:42:38 1 none none:none
 tElock| none trace
5706f2fc14
NEW		 none[none] Win2K-f 33 of 36 23:12:03 23:12:03 1 none none:none
 none|none none none