Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


20 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
627731ae2b
[Firefox: 2 hits: 07-02 to 08-09]		 none[none] Win2K-f 31 of 33 01:15:13 01:15:13 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
73f1082158
[Firefox:1138 hits: 06-18 to 09-19]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:09:01 23:46:58 14 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
bea8cb1865
[Firefox:11 hits: 08-11 to 09-17]
fac78fde16
[Firefox: 2 hits: 09-13 to 09-17]		 none[none]
none [none]		 Win2K-f 35 of 36 13:05:00 13:05:00 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0e6bec09f
NEW		 none[4] WinXP 30 of 32 06:06:40 06:06:40 1 none none:none
 PolyEnE| none trace
1fcc146d70
[Firefox:43 hits: 01-02 to 09-19]		 258fafe892 [0] WinXP 29 of 29 18:31:09 18:31:11 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7f6ea12654
[Firefox:21 hits: 07-13 to 08-30]		 none[none] WinXP 32 of 33 04:54:29 04:54:29 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]		 none[4] Win2K-f
WinXP		 33 of 33 00:09:01 23:46:58 34 none none:none
 tElock| none trace
389cf0c860
[Firefox: 2 hits: 08-26 to 08-29]		 none[none] Win2K-f 34 of 36 08:06:36 08:06:36 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 6 hits: 06-18 to 09-18]
e5e0dbde57
[Firefox: 6 hits: 06-18 to 09-18]		 1951eee0cd [1]
none [4]		 Win2K-f 31 of 33 22:40:42 22:40:42 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
e4ed963a77
[Firefox: 2 hits: 09-18 to 09-19]		 none[none] WinXP 36 of 36 19:31:17 19:31:17 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
b7082104e4
[Firefox:138 hits: 06-18 to 09-19]		 none[4]
none [4]		 Win2K-f 8 of 33 14:00:38 19:41:37 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
7f89b38665
[Firefox:14 hits: 08-02 to 09-19]		 none[none] WinXP 32 of 36 07:59:56 07:59:56 1 none none:none
 none|none none none
55d816f3e9
NEW		 none[none] Win2K-f 33 of 36 23:42:29 23:42:29 1 none none:none
 none|none none none
842b9045e1
NEW		 none[none] WinXP 33 of 36 19:50:49 19:50:49 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 6 hits: 06-18 to 09-18]		 1951eee0cd [1] Win2K-f 27 of 33 22:40:42 22:40:42 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
1b7ec6ce60
[Firefox: 4 hits: 09-16 to 09-18]		 none[none] WinXP 35 of 36 15:31:23 15:31:23 1 none none:none
 none|none none none
d7d1a04bbe
NEW		 none[none] WinXP 35 of 36 11:04:47 11:04:47 1 none none:none
 none|none none none
43c48370d1
NEW		 none[none] WinXP 34 of 36 13:32:03 13:32:03 1 none none:none
 none|none none none
4c3df24b32
[Firefox:186 hits: 06-17 to 09-18]
99745b0c1d
NEW		 4c3df24b32 [1]
none [none]		 Win2K-f 34 of 36 20:15:58 20:15:58 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
168aab35a3
[Firefox:131 hits: 06-17 to 09-18]		 none[4] WinXP 31 of 33 07:22:55 18:37:31 2 none none:none
 tElock| none trace
627731ae2b
[Firefox: 2 hits: 07-02 to 08-09]
9db7aea9c0
[Firefox: 2 hits: 07-02 to 08-09]		 none[none]
none [none]		 Win2K-f 29 of 33 01:15:13 01:15:13 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
bca9e0fb5f
[Firefox:26 hits: 06-18 to 08-30]		 none[4] Win2K-f
WinXP		 31 of 32 22:09:11 23:02:50 2 none none:none
 PolyEnE| none trace
533d15b5ce
[Firefox:25 hits: 06-21 to 09-16]		 none[4] Win2K-f 30 of 33 19:28:07 19:28:07 1 none none:none
 tElock| none trace
2334b1bb4c
NEW		 none[none] WinXP 35 of 36 13:32:22 13:32:23 2 none none:none
 none|none none none
a12cab51ef
[Firefox:525 hits: 01-01 to 09-18]		 40f7f463c4 [0] WinXP 29 of 29 14:55:52 14:55:52 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
d99da8735e
[Firefox: 3 hits: 09-18 to 09-19]		 none[none] WinXP 34 of 36 23:22:17 23:22:17 1 none none:none
 none|none none none
f502585714
[Firefox:41 hits: 01-02 to 09-14]		 ae590430c5 [0] WinXP 29 of 29 07:16:45 07:16:45 1 none ASM:Graph
 PolyEnE| 100% lines=63 trace
03f912899b
[Firefox:129 hits: 01-08 to 09-19]		 83893bd25d [0] WinXP 32 of 32 15:51:09 22:02:27 2 none ASM:Graph
 none|none 100% lines=65 trace
55d816f3e9
NEW
84a24d85f7
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 23:42:29 23:42:29 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
18f75b34a5
[Firefox: 2 hits: 06-18 to 06-20]		 none[4] WinXP 30 of 33 22:50:02 22:50:02 1 none none:none
 PolyEnE| none trace
571e381ed4
[Firefox: 9 hits: 09-14 to 09-19]		 none[none] WinXP 35 of 36 11:27:19 11:27:19 1 none none:none
 none|none none none
ba4637f8f0
[Firefox:11 hits: 07-01 to 09-18]
d02ae67164
[Firefox:11 hits: 07-01 to 09-18]		 none[none]
none [none]		 WinXP 31 of 33 10:40:31 10:40:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:186 hits: 06-17 to 09-18]		 4c3df24b32 [1] Win2K-f 0 of 33 20:15:58 20:15:58 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
168aab35a3
[Firefox:131 hits: 06-17 to 09-18]
667f0c59f3
[Firefox:23 hits: 07-04 to 09-17]		 none[4]
none [none]		 WinXP 31 of 33 07:22:55 07:22:55 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:131 hits: 06-17 to 09-18]
58828b2adc
NEW		 none[4]
none [none]		 WinXP 34 of 36 18:37:31 18:37:31 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
2570434ea6
NEW		 none[none] WinXP 35 of 36 14:52:11 14:52:11 1 none none:none
 none|none none none
6d86a1ff5a
[Firefox:34 hits: 06-25 to 08-20]		 none[none] Win2K-f 28 of 33 11:21:24 11:21:36 2 none none:none
 none|none none none
741e3b03b3
[Firefox:375 hits: 01-05 to 09-19]		 e0197e8a64 [0] WinXP 31 of 32 05:35:57 23:41:17 6 none ASM:Graph
 none|none 100% lines=62 trace
f353d4eed9
[Firefox: 3 hits: 09-17 to 09-18]		 none[none] WinXP 35 of 36 04:27:54 17:32:54 3 none none:none
 none|none none none
b7a2b9be2a
NEW		 none[none] WinXP 36 of 36 01:00:59 01:00:59 1 none none:none
 none|none none none
6d86a1ff5a
[Firefox:34 hits: 06-25 to 08-20]
7f6e032fc0
[Firefox:34 hits: 06-25 to 08-20]		 none[none]
none [none]		 Win2K-f 31 of 33 11:21:24 11:21:36 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
bea8cb1865
[Firefox:11 hits: 08-11 to 09-17]		 none[none] Win2K-f 32 of 36 13:05:00 13:05:00 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:547 hits: 01-01 to 09-19]		 eb7546c600 [0] WinXP 29 of 29 04:44:20 04:44:20 1 none ASM:Graph
 none|none 100% lines=61 trace
533d15b5ce
[Firefox:25 hits: 06-21 to 09-16]
58c343a8d8
[Firefox:28 hits: 06-21 to 09-16]		 none[4]
58c343a8d8[1]		 Win2K-f 28 of 33 19:28:07 19:28:07 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
bfdd984464
NEW		 none[none] WinXP 34 of 36 16:41:19 16:41:19 1 none none:none
 none|none none none
4c1a8e5092
NEW		 none[none] WinXP 34 of 36 14:23:07 14:23:07 1 none none:none
 none|none none none
17028f1eda
[Firefox:33 hits: 04-18 to 09-15]		 none[3] WinXP 31 of 32 23:31:01 23:31:01 1 none none:none
 tElock| none trace
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
73f1082158
[Firefox:1138 hits: 06-18 to 09-19]
b5919931fe
[Firefox:609 hits: 06-20 to 09-19]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 00:09:01 23:13:12 13 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
2204fd4d17
[Firefox: 4 hits: 09-15 to 09-18]		 none[none] Win2K-f 35 of 36 09:25:40 09:25:40 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
57ce4acac2
[Firefox:189 hits: 06-17 to 09-19]		 none[4]
57ce4acac2[1]		 Win2K-f
WinXP		 0 of 33 00:21:53 18:39:07 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
e1a16d858c
NEW		 none[none] WinXP 35 of 36 08:48:12 13:10:26 3 none none:none
 none|none none none
11079645a6
NEW		 none[none] WinXP 34 of 36 08:25:34 08:25:52 2 none none:none
 none|none none none
1a2c0e6130
[Firefox:403 hits: 12-31 to 09-19]		 048df78048 [0] WinXP 29 of 29 09:16:24 22:15:09 2 none ASM:Graph
 none|none 100% lines=61 trace
142c0d8e6f
NEW		 none[none] WinXP 34 of 36 20:07:34 20:07:34 1 none none:none
 none|none none none
1f653ddb7f
NEW		 none[none] WinXP 33 of 36 00:51:21 00:51:21 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
a08f3b74a4
[Firefox:787 hits: 06-18 to 09-19]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 00:39:42 22:27:05 15 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
[Firefox:10 hits: 09-13 to 09-19]		 none[none] WinXP 36 of 36 06:15:15 12:52:00 2 none none:none
 none|none none none
7f89b38665
[Firefox:14 hits: 08-02 to 09-19]
a51a50404e
[Firefox:14 hits: 08-02 to 09-19]		 none[none]
none [none]		 WinXP 34 of 36 07:59:56 07:59:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
41065f98ee
[Firefox: 6 hits: 08-04 to 09-16]		 none[none] WinXP 36 of 36 10:21:35 10:21:35 1 none none:none
 none|none none none
c707b3f22a
[Firefox: 3 hits: 08-06 to 08-19]		 none[none] WinXP 36 of 36 10:12:36 10:12:36 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:103 hits: 01-03 to 09-19]		 d9e9662db1 [0] WinXP 29 of 29 09:26:50 14:42:55 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ba6f48b79a
[Firefox: 5 hits: 09-15 to 09-16]		 none[none] WinXP 34 of 36 07:34:36 07:34:36 1 none none:none
 none|none none none
a84ffdf670
[Firefox: 3 hits: 09-14 to 09-18]		 none[none] WinXP 36 of 36 15:54:44 17:15:48 2 none none:none
 none|none none none
607b60ad51
[Firefox:35 hits: 06-20 to 09-18]
e5c7bce70e
[Firefox:34 hits: 06-20 to 09-18]		 none[4]
e5c7bce70e[1]		 Win2K-f
WinXP		 2 of 32 13:28:09 22:46:00 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
8a75955033
[Firefox:32 hits: 06-20 to 09-18]
9276c8b36b
[Firefox:32 hits: 06-20 to 09-18]		 none[4]
9276c8b36b[1]		 Win2K-f 28 of 32 05:27:43 05:27:43 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
3373948767
[Firefox:24 hits: 07-03 to 09-19]
b5919931fe
[Firefox:609 hits: 06-20 to 09-19]
c73f738c30
[Firefox:24 hits: 07-03 to 09-19]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 29 of 33 15:19:20 15:19:20 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
df17a625ee
[Firefox:242 hits: 01-01 to 09-19]		 9bbdd086c5 [0] WinXP 29 of 29 14:40:38 14:40:38 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
e30fb27bda
[Firefox: 8 hits: 07-07 to 09-16]		 none[none] Win2K-f 33 of 33 06:15:05 06:15:05 1 none none:none
 none|none none none
2204fd4d17
[Firefox: 4 hits: 09-15 to 09-18]
eb0857e1b1
[Firefox: 4 hits: 09-15 to 09-18]		 none[none]
none [none]		 Win2K-f 32 of 36 09:25:40 09:25:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
986b59708d
[Firefox:77 hits: 01-14 to 09-18]		 8a00217866 [0] WinXP 29 of 29 07:00:42 18:33:22 2 none ASM:Graph
 PolyEnE| 100% lines=57 trace
516f7aaac5
[Firefox: 2 hits: 09-19 to 09-19]		 none[none] WinXP 35 of 36 13:00:10 16:51:37 3 none none:none
 none|none none none
5339bd7cdf
NEW
f89b0fbb86
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 01:33:03 01:33:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
bca9e0fb5f
[Firefox:26 hits: 06-18 to 08-30]
e53a9ea82e
[Firefox:26 hits: 06-18 to 08-30]		 none[4]
e53a9ea82e[1]		 Win2K-f
WinXP		 23 of 33 22:09:11 23:02:50 2 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
a9cfbd1b0c
[Firefox: 5 hits: 09-12 to 09-15]		 none[none] WinXP 36 of 36 04:16:07 04:16:07 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2283 hits: 06-17 to 09-19]
73f1082158
[Firefox:1138 hits: 06-18 to 09-19]
e07c29c4ae
[Firefox:474 hits: 06-19 to 09-19]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 07:22:55 15:47:46 4 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
a398065ae3
NEW		 none[none] WinXP 36 of 36 12:14:21 12:14:21 1 none none:none
 none|none none none
eca9a5fa95
[Firefox:14 hits: 08-09 to 09-17]		 none[none] WinXP 36 of 36 16:25:16 18:49:37 2 none none:none
 none|none none none
4c1a8e5092
NEW
8c5987537c
NEW		 none[none]
none [none]		 WinXP 32 of 36 14:23:07 14:23:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8a75955033
[Firefox:32 hits: 06-20 to 09-18]		 none[4] Win2K-f 29 of 32 05:27:43 05:27:43 1 none none:none
 tElock| none trace
49d6cdaab4
[Firefox: 2 hits: 09-13 to 09-15]		 none[none] WinXP 34 of 36 11:42:46 11:42:46 1 none none:none
 none|none none none
85597d85c0
[Firefox: 2 hits: 04-29 to 07-22]		 f00f427b94 [0] WinXP 29 of 31 08:48:55 08:48:55 1 none ASM:Graph
 PolyEnE| 54% lines=265
embedded dns		 trace
7f60162c2c
[Firefox:585 hits: 12-31 to 09-19]		 1aad8e4632 [0] WinXP 25 of 25 02:46:59 22:43:32 11 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
776985f561
[Firefox:13 hits: 06-24 to 09-19]		 776985f561 [1] Win2K-f 31 of 33 05:50:46 05:50:46 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
b4438fd66a
NEW		 none[none] WinXP 34 of 36 05:43:22 05:43:22 1 none none:none
 none|none none none
5339bd7cdf
NEW		 none[none] Win2K-f 35 of 36 01:33:03 01:33:03 1 none none:none
 none|none none none
da5b172485
NEW		 none[none] WinXP 34 of 36 15:16:11 15:16:11 1 none none:none
 none|none none none
d6be94e7ab
NEW		 none[none] WinXP 34 of 36 21:55:35 21:55:35 1 none none:none
 none|none none none
71b183b0c8
[Firefox: 2 hits: 09-17 to 09-19]		 none[none] WinXP 36 of 36 16:41:48 16:41:48 1 none none:none
 none|none none none
f0b49cdcfc
[Firefox:15 hits: 07-04 to 09-15]		 none[none] WinXP 33 of 33 16:25:01 16:25:01 1 none none:none
 none|none none none
389cf0c860
[Firefox: 2 hits: 08-26 to 08-29]
ed7d5d9ce7
[Firefox: 3 hits: 08-26 to 09-14]		 none[none]
none [none]		 Win2K-f 33 of 36 08:06:36 08:06:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3373948767
[Firefox:24 hits: 07-03 to 09-19]		 none[none] Win2K-f 30 of 33 15:19:20 15:19:20 1 none none:none
 none|none none none
42cd06418e
NEW		 none[none] WinXP 35 of 36 12:09:22 12:09:22 1 none none:none
 none|none none none
ba4637f8f0
[Firefox:11 hits: 07-01 to 09-18]		 none[none] WinXP 28 of 33 10:40:31 10:40:31 1 none none:none
 none|none none none
ae024849a2
NEW		 none[none] WinXP 35 of 36 13:55:17 16:57:58 2 none none:none
 none|none none none
7d99b0e910
[Firefox:1118 hits: 12-31 to 09-19]		 7a70e1b592 [0] WinXP 26 of 28 01:24:06 23:23:22 9 none ASM:Graph
 PolyEnE| 99% lines=68 trace
1509c8d024
[Firefox:23 hits: 06-17 to 09-15]
f23b040440
[Firefox:14 hits: 06-22 to 09-15]		 none[4]
f23b040440[1]		 WinXP 30 of 32 22:38:04 22:44:43 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
bd8d0a8f7b
NEW		 none[none] WinXP 35 of 36 17:54:12 17:54:12 1 none none:none
 none|none none none
26e3526604
NEW		 none[none] WinXP 34 of 36 14:32:33 14:32:33 1 none none:none
 none|none none none
776985f561
[Firefox:13 hits: 06-24 to 09-19]
8ec6129efe
[Firefox:13 hits: 06-24 to 09-19]		 776985f561 [1]
none [4]		 Win2K-f 31 of 33 05:50:46 05:50:46 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
1509c8d024
[Firefox:23 hits: 06-17 to 09-15]		 none[4] WinXP 31 of 33 22:38:04 22:44:43 2 none none:none
 tElock| none trace
c4c5a56ffe
[Firefox: 7 hits: 08-15 to 08-24]		 none[none] Win2K-f 11 of 36 18:34:26 18:38:06 2 none none:none
 none|none none none
cdf8cd94a9
[Firefox: 7 hits: 09-14 to 09-19]		 none[none] WinXP 35 of 36 15:58:15 16:14:06 2 none none:none
 none|none none none
278f5bd23c
NEW		 none[none] WinXP 35 of 36 01:47:21 01:47:21 1 none none:none
 none|none none none
607b60ad51
[Firefox:35 hits: 06-20 to 09-18]		 none[4] Win2K-f
WinXP		 31 of 32 13:28:09 22:46:00 3 none none:none
 tElock| none trace