Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


19 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
da00a8e7a1
[Firefox:13 hits: 08-05 to 09-15]
f685f8e027
[Firefox:17 hits: 06-18 to 09-15]		 none[none]
f685f8e027[1]		 WinXP 28 of 33 15:04:47 15:04:47 1 none none:none
ASM:Graph
 none|none
Armadillo|		 48% none
lines=82		 none
trace
3b2958417b
[Firefox: 9 hits: 07-09 to 08-27]		 none[none] WinXP 33 of 33 19:09:00 19:09:00 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
73f1082158
[Firefox:1125 hits: 06-18 to 09-18]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 08:47:08 23:31:19 13 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
71393aa8bb
NEW		 none[none] Win2K-f 32 of 36 20:40:45 20:40:45 1 none none:none
 none|none none none
1fcc146d70
[Firefox:39 hits: 01-02 to 09-17]		 258fafe892 [0] WinXP 29 of 29 10:16:43 13:36:41 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]		 none[4] Win2K-f
WinXP		 33 of 33 02:01:36 23:31:19 26 none none:none
 tElock| none trace
623e0b5433
[Firefox: 5 hits: 09-14 to 09-18]		 none[none] WinXP 34 of 36 05:00:01 21:10:45 4 none none:none
 none|none none none
e4ed963a77
NEW		 none[none] WinXP 36 of 36 09:24:10 09:24:10 1 none none:none
 none|none none none
27aab4187c
[Firefox: 3 hits: 09-15 to 09-16]
3cd1361df4
[Firefox: 3 hits: 09-15 to 09-16]
a65dda48ec
[Firefox: 3 hits: 09-15 to 09-16]
c025f08a76
[Firefox: 3 hits: 09-15 to 09-16]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 10 of 36 08:11:35 08:11:35 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
b7082104e4
[Firefox:136 hits: 06-18 to 09-18]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 02:02:36 07:15:43 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
7f89b38665
[Firefox:13 hits: 08-02 to 09-18]		 none[none] WinXP 32 of 36 00:54:49 00:54:49 1 none none:none
 none|none none none
5aeb9abc92
[Firefox:13 hits: 07-15 to 09-14]		 none[none] Win2K-f 26 of 32 13:35:32 13:35:32 1 none none:none
 none|none none none
27aab4187c
[Firefox: 3 hits: 09-15 to 09-16]
3cd1361df4
[Firefox: 3 hits: 09-15 to 09-16]		 none[none]
none [none]		 Win2K-f 16 of 36 08:11:35 08:11:35 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
27aab4187c
[Firefox: 3 hits: 09-15 to 09-16]
3cd1361df4
[Firefox: 3 hits: 09-15 to 09-16]
a65dda48ec
[Firefox: 3 hits: 09-15 to 09-16]		 none[none]
none [none]
none [none]		 Win2K-f 20 of 36 08:11:35 08:11:35 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
d7d1a04bbe
NEW		 none[none] WinXP 35 of 36 06:04:06 06:04:06 1 none none:none
 none|none none none
2bae429c88
NEW		 none[none] WinXP 35 of 36 10:49:21 10:49:21 1 none none:none
 none|none none none
27aab4187c
[Firefox: 3 hits: 09-15 to 09-16]		 none[none] Win2K-f 19 of 36 08:11:35 08:11:35 1 none none:none
 none|none none none
d99da8735e
[Firefox: 2 hits: 09-18 to 09-18]		 none[none] WinXP 34 of 36 10:17:49 10:17:49 1 none none:none
 none|none none none
03f912899b
[Firefox:127 hits: 01-08 to 09-18]		 83893bd25d [0] WinXP 32 of 32 18:56:10 21:46:59 2 none ASM:Graph
 none|none 100% lines=65 trace
137ca3d320
NEW
254aacaa67
NEW		 none[none]
none [none]		 WinXP 34 of 36 14:38:57 14:38:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
571e381ed4
[Firefox: 8 hits: 09-14 to 09-18]		 none[none] WinXP 35 of 36 04:34:12 04:34:12 1 none none:none
 none|none none none
dfec585ee1
[Firefox: 2 hits: 06-30 to 08-17]		 none[none] WinXP 31 of 33 09:04:05 09:04:05 1 none none:none
 none|none none none
74d2a24ee8
NEW
7b7c07bc09
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 08:14:16 08:14:16 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
726638fb22
NEW		 none[none] WinXP 34 of 36 05:40:48 05:40:48 1 none none:none
 none|none none none
27aab4187c
[Firefox: 3 hits: 09-15 to 09-16]
3cd1361df4
[Firefox: 3 hits: 09-15 to 09-16]
a65dda48ec
[Firefox: 3 hits: 09-15 to 09-16]
c025f08a76
[Firefox: 3 hits: 09-15 to 09-16]
faa8c4cc81
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 35 of 36 08:11:35 08:11:35 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
74d2a24ee8
NEW		 none[none] Win2K-f 34 of 36 08:14:16 08:14:16 1 none none:none
 none|none none none
741e3b03b3
[Firefox:370 hits: 01-05 to 09-18]		 e0197e8a64 [0] WinXP 31 of 32 03:10:36 23:21:24 5 none ASM:Graph
 none|none 100% lines=62 trace
1c2b35cc77
NEW
c4042a9d37
NEW		 none[none]
none [none]		 WinXP 33 of 36 06:40:04 06:40:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
11cd4bb3ff
NEW
c8c94cc597
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 00:25:04 00:25:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
831f4ee0a7
[Firefox:541 hits: 01-01 to 09-18]		 eb7546c600 [0] WinXP 29 of 29 03:54:08 15:28:08 6 none ASM:Graph
 none|none 100% lines=61 trace
1c2b35cc77
NEW		 none[none] WinXP 34 of 36 06:40:04 06:40:04 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
a08f3b74a4
[Firefox:777 hits: 06-18 to 09-18]
b5919931fe
[Firefox:604 hits: 06-20 to 09-18]		 none[4]
a08f3b74a4[1]
b5919931fe[1]		 Win2K-f 0 of 32 02:02:36 17:18:24 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
57ce4acac2
[Firefox:187 hits: 06-17 to 09-18]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 02:01:36 17:30:27 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1a2c0e6130
[Firefox:399 hits: 12-31 to 09-18]		 048df78048 [0] WinXP 29 of 29 10:21:39 13:15:02 4 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
a08f3b74a4
[Firefox:777 hits: 06-18 to 09-18]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 12:17:33 23:03:09 10 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b504f1f9a6
NEW		 none[none] WinXP 35 of 36 18:57:57 18:57:57 1 none none:none
 none|none none none
b872c76081
[Firefox: 7 hits: 09-13 to 09-18]		 none[none] WinXP 36 of 36 04:23:38 07:52:14 3 none none:none
 none|none none none
7f89b38665
[Firefox:13 hits: 08-02 to 09-18]
a51a50404e
[Firefox:13 hits: 08-02 to 09-18]		 none[none]
none [none]		 WinXP 34 of 36 00:54:49 00:54:49 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
e64a076d45
NEW		 none[none] WinXP 33 of 35 11:40:37 11:40:37 1 none none:none
 none|none none none
6dcb69f95a
[Firefox: 3 hits: 09-14 to 09-16]		 none[none] WinXP 11 of 36 06:16:32 06:16:32 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:102 hits: 01-03 to 09-18]		 d9e9662db1 [0] WinXP 29 of 29 06:43:08 06:43:08 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
9b9e5dcb18
[Firefox:14 hits: 08-08 to 08-26]		 none[none] WinXP 36 of 36 02:12:59 02:12:59 1 none none:none
 none|none none none
ea9787a186
[Firefox: 5 hits: 06-20 to 08-29]		 none[4] WinXP 29 of 32 02:38:49 02:38:49 1 none none:none
 PolyEnE| none trace
64d06f0dfa
NEW		 none[none] WinXP 36 of 36 00:09:30 00:09:51 2 none none:none
 none|none none none
0d3fafbf29
[Firefox: 3 hits: 06-21 to 08-22]
d401773a07
[Firefox: 3 hits: 06-21 to 08-22]		 0d3fafbf29 [1]
none [4]		 WinXP 29 of 33 17:59:52 17:59:52 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
e3ce8985e6
[Firefox: 3 hits: 03-08 to 07-14]		 3762d19d64 [0] WinXP 31 of 32 16:37:07 16:37:07 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
248df180b3
NEW		 none[none] WinXP 35 of 36 07:19:02 07:19:02 1 none none:none
 none|none none none
0d3fafbf29
[Firefox: 3 hits: 06-21 to 08-22]		 0d3fafbf29 [1] WinXP 28 of 33 17:59:52 17:59:52 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
516f907f63
NEW		 none[none] WinXP 11 of 36 02:34:14 02:34:14 1 none none:none
 none|none none none
2f51eb82f4
NEW
3373948767
[Firefox:22 hits: 07-03 to 09-14]
c73f738c30
[Firefox:22 hits: 07-03 to 09-14]		 none[none]
none [none]
none [none]		 Win2K-f 29 of 33 00:41:50 23:53:00 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
df17a625ee
[Firefox:241 hits: 01-01 to 09-18]		 9bbdd086c5 [0] WinXP 29 of 29 03:00:23 03:00:23 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
43b2a2d8a8
NEW		 none[none] WinXP 34 of 36 18:51:22 18:51:22 1 none none:none
 none|none none none
c05385e600
[Firefox:15 hits: 01-20 to 09-18]		 6a383b021d [0] WinXP 29 of 29 09:41:13 09:41:13 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
516f7aaac5
NEW		 none[none] WinXP 35 of 36 17:15:16 17:15:40 2 none none:none
 none|none none none
11cd4bb3ff
NEW		 none[none] Win2K-f 23 of 36 00:25:04 00:25:04 1 none none:none
 none|none none none
1f59c01aef
[Firefox: 7 hits: 08-01 to 08-23]		 none[none] Win2K-f 34 of 36 07:50:22 07:50:22 1 none none:none
 none|none none none
1f59c01aef
[Firefox: 7 hits: 08-01 to 08-23]
dc92683d9a
[Firefox:14 hits: 06-19 to 08-23]		 none[none]
dc92683d9a[1]		 Win2K-f 29 of 33 07:50:22 07:50:22 1 none none:none
ASM:Graph
 none|none
Armadillo|		 47% none
lines=82		 none
trace
57a9faaddf
NEW		 none[none] WinXP 33 of 34 15:20:49 15:20:49 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2257 hits: 06-17 to 09-18]
a08f3b74a4
[Firefox:777 hits: 06-18 to 09-18]
e07c29c4ae
[Firefox:466 hits: 06-19 to 09-18]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 06:40:04 21:16:00 8 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ca47a36342
[Firefox: 7 hits: 02-16 to 09-16]		 c3a58f69c6 [0] WinXP 26 of 28 12:40:09 12:40:09 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
efeb24872b
NEW		 none[none] WinXP 34 of 36 18:32:06 22:15:26 3 none none:none
 none|none none none
f677c36972
NEW		 none[none] WinXP 32 of 35 15:55:23 15:55:23 1 none none:none
 none|none none none
99bfd6101e
NEW		 none[none] Win2K-f 36 of 36 02:59:55 02:59:55 1 none none:none
 none|none none none
2f51eb82f4
NEW		 none[none] Win2K-f 0 of 36 23:53:00 23:53:00 1 none none:none
 none|none none none
7f60162c2c
[Firefox:575 hits: 12-31 to 09-18]		 1aad8e4632 [0] WinXP 25 of 25 03:08:47 23:31:51 10 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
dbbc586732
[Firefox:33 hits: 07-28 to 09-18]		 none[none] WinXP 35 of 35 23:27:38 23:27:38 1 none none:none
 none|none none none
776985f561
[Firefox:12 hits: 06-24 to 09-17]		 776985f561 [1] Win2K-f 31 of 33 03:07:34 03:07:34 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
2f79d6cd8c
NEW		 none[none] WinXP 35 of 36 13:33:09 13:33:09 1 none none:none
 none|none none none
71b183b0c8
NEW		 none[none] WinXP 36 of 36 09:40:11 09:40:11 1 none none:none
 none|none none none
2f51eb82f4
NEW
3373948767
[Firefox:22 hits: 07-03 to 09-14]		 none[none]
none [none]		 Win2K-f 30 of 33 00:41:50 23:53:00 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
71393aa8bb
NEW
f09cf3e3b3
NEW		 none[none]
none [none]		 Win2K-f 35 of 36 20:40:45 20:40:45 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b9cdf4ca69
[Firefox: 6 hits: 06-18 to 09-18]		 none[4] Win2K-f 31 of 33 04:40:58 04:40:58 1 none none:none
 none|none none trace
da00a8e7a1
[Firefox:13 hits: 08-05 to 09-15]		 none[none] WinXP 34 of 36 15:04:47 15:04:47 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1106 hits: 12-31 to 09-18]		 7a70e1b592 [0] WinXP 26 of 28 01:29:00 22:35:01 12 none ASM:Graph
 PolyEnE| 99% lines=68 trace
92010e1c85
NEW		 none[none] WinXP 36 of 36 17:18:16 17:18:16 1 none none:none
 none|none none none
776985f561
[Firefox:12 hits: 06-24 to 09-17]
8ec6129efe
[Firefox:12 hits: 06-24 to 09-17]		 776985f561 [1]
none [4]		 Win2K-f 31 of 33 03:07:34 03:07:34 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
e2cd0c3b41
NEW		 none[none] WinXP 29 of 29 14:09:55 14:09:55 1 none none:none
 none|none none none
cdf8cd94a9
[Firefox: 6 hits: 09-14 to 09-17]		 none[none] WinXP 35 of 36 15:49:42 15:49:42 1 none none:none
 none|none none none
137ca3d320
NEW		 none[none] WinXP 31 of 35 14:38:57 14:38:57 1 none none:none
 none|none none none
094e250564
NEW		 none[none] WinXP 35 of 36 04:22:33 04:22:33 1 none none:none
 none|none none none