Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


24 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
29da5b359b
NEW
677277c61d
NEW		 none[none]
none [none]		 WinXP 32 of 36 22:38:10 22:38:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]
73f1082158
[Firefox:1195 hits: 06-18 to 09-23]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:31:54 21:51:33 15 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
8c45399d60
NEW
b5919931fe
[Firefox:642 hits: 06-20 to 09-23]
d9a7255548
NEW		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 34 of 36 23:02:39 23:02:39 1 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
80d03739c2
NEW		 none[none] WinXP 35 of 36 22:29:33 22:29:33 1 none none:none
 none|none none none
34b0957281
NEW
60430bf12d
NEW		 none[none]
none [none]		 WinXP 35 of 36 19:38:38 19:38:38 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
22de60782a
NEW		 none[none] WinXP 2 of 36 19:05:35 19:05:35 1 none none:none
 none|none none none
290e2cd1fc
[Firefox: 4 hits: 09-14 to 09-23]		 none[none] WinXP 35 of 36 06:58:51 06:58:53 2 none none:none
 none|none none none
1fcc146d70
[Firefox:49 hits: 01-02 to 09-23]		 258fafe892 [0] WinXP 29 of 29 06:06:02 06:06:02 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]		 none[4] Win2K-f
WinXP		 33 of 33 00:31:54 22:16:01 37 none none:none
 tElock| none trace
0bfa79dc19
[Firefox:10 hits: 07-22 to 09-12]		 none[none] WinXP
Win2K-f		 31 of 33 17:37:06 21:30:57 3 none none:none
 none|none none none
29da5b359b
NEW		 none[none] WinXP 34 of 36 22:38:10 22:38:10 1 none none:none
 none|none none none
87e1117f2a
[Firefox: 8 hits: 07-18 to 09-21]		 none[none] WinXP 32 of 33 04:24:19 04:24:19 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 8 hits: 06-18 to 09-21]
e5e0dbde57
[Firefox: 8 hits: 06-18 to 09-21]		 1951eee0cd [1]
none [4]		 WinXP 31 of 33 03:43:28 03:43:28 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
168aab35a3
[Firefox:135 hits: 06-17 to 09-23]
928e2a1591
NEW		 none[4]
none [none]		 Win2K-f 34 of 36 09:33:10 09:33:10 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
7f89b38665
[Firefox:15 hits: 08-02 to 09-20]		 none[none] WinXP 32 of 36 23:35:04 23:35:04 1 none none:none
 none|none none none
023977790d
NEW		 none[none] Win2K-f 32 of 36 16:50:44 16:50:44 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]
b7082104e4
[Firefox:146 hits: 06-18 to 09-23]		 none[4]
none [4]		 WinXP 8 of 33 02:41:11 17:13:38 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
0474b4b09f
NEW		 none[none] Win2K-f 34 of 36 22:56:35 22:56:35 1 none none:none
 none|none none none
55d816f3e9
[Firefox: 2 hits: 09-20 to 09-21]		 none[none] WinXP 33 of 36 09:29:24 09:29:24 1 none none:none
 none|none none none
1b7ec6ce60
[Firefox: 5 hits: 09-16 to 09-20]		 none[none] WinXP 35 of 36 23:29:47 23:29:47 1 none none:none
 none|none none none
2a0ee3c795
[Firefox: 6 hits: 09-13 to 09-18]		 none[none] Win2K-f 27 of 36 08:54:25 08:54:25 1 none none:none
 none|none none none
1951eee0cd
[Firefox: 8 hits: 06-18 to 09-21]		 1951eee0cd [1] WinXP 27 of 33 03:43:28 03:43:28 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
168aab35a3
[Firefox:135 hits: 06-17 to 09-23]		 none[4] Win2K-f 31 of 33 05:51:18 10:09:23 3 none none:none
 tElock| none trace
475d9a7753
[Firefox: 3 hits: 06-22 to 09-15]		 none[4] Win2K-f 30 of 32 11:21:03 11:21:03 1 none none:none
 tElock| none trace
397e8d18ce
NEW		 none[none] WinXP 33 of 35 23:28:01 23:28:01 1 none none:none
 none|none none none
d42c1cc7c0
[Firefox:133 hits: 01-01 to 09-22]		 af9ca5bed1 [0] WinXP 29 of 29 16:39:32 16:39:57 2 none ASM:Graph
 PolyEnE| 100% lines=54 trace
bca9e0fb5f
[Firefox:29 hits: 06-18 to 09-23]		 none[4] Win2K-f 31 of 32 01:19:59 01:19:59 1 none none:none
 PolyEnE| none trace
a12cab51ef
[Firefox:529 hits: 01-01 to 09-23]		 40f7f463c4 [0] WinXP 29 of 29 05:46:54 21:09:40 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
18369c36f5
NEW
e1cf89c22d
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 33 of 36 14:42:34 19:34:25 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f502585714
[Firefox:42 hits: 01-02 to 09-20]		 ae590430c5 [0] WinXP 29 of 29 11:24:31 11:25:19 2 none ASM:Graph
 PolyEnE| 100% lines=63 trace
6063a9fbda
NEW		 none[none] WinXP 35 of 36 02:11:23 02:11:23 1 none none:none
 none|none none none
03f912899b
[Firefox:137 hits: 01-08 to 09-23]		 83893bd25d [0] WinXP 32 of 32 08:00:38 08:00:38 1 none ASM:Graph
 none|none 100% lines=65 trace
4d17a9a4c2
NEW		 none[none] WinXP 32 of 36 12:01:06 12:01:06 1 none none:none
 none|none none none
55d816f3e9
[Firefox: 2 hits: 09-20 to 09-21]
84a24d85f7
[Firefox: 2 hits: 09-20 to 09-21]		 none[none]
none [none]		 WinXP 34 of 36 09:29:24 09:29:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
8c45399d60
NEW		 none[none] Win2K-f 32 of 36 23:02:39 23:02:39 1 none none:none
 none|none none none
2e04b06527
[Firefox: 8 hits: 06-18 to 09-16]
514265be41
NEW		 none[4]
none [none]		 Win2K-f 2 of 36 16:19:09 16:19:09 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
4c3df24b32
[Firefox:191 hits: 06-17 to 09-23]		 4c3df24b32 [1] Win2K-f
WinXP		 0 of 33 04:18:32 18:37:30 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
741e3b03b3
[Firefox:397 hits: 01-05 to 09-23]		 e0197e8a64 [0] WinXP 31 of 32 00:27:39 05:13:01 2 none ASM:Graph
 none|none 100% lines=62 trace
f353d4eed9
[Firefox:12 hits: 09-17 to 09-23]		 none[none] WinXP 35 of 36 14:09:37 18:08:04 4 none none:none
 none|none none none
0a0261b96a
[Firefox: 4 hits: 07-16 to 07-28]		 none[none] Win2K-f 24 of 29 11:19:20 11:19:20 1 none none:none
 none|none none none
0bfa79dc19
[Firefox:10 hits: 07-22 to 09-12]
8dfb3b619f
[Firefox:11 hits: 07-22 to 09-12]		 none[none]
none [none]		 WinXP
Win2K-f		 29 of 34 17:37:06 21:30:57 3 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2d6c8c447f
[Firefox: 2 hits: 09-16 to 09-16]		 none[none] WinXP 36 of 36 15:51:48 16:07:01 4 none none:none
 none|none none none
831f4ee0a7
[Firefox:557 hits: 01-01 to 09-23]		 eb7546c600 [0] WinXP 29 of 29 03:34:18 19:08:10 2 none ASM:Graph
 none|none 100% lines=61 trace
f5501ecc1c
NEW		 none[none] WinXP 34 of 36 12:26:36 12:26:58 2 none none:none
 none|none none none
039e3fa376
[Firefox: 4 hits: 07-24 to 09-14]
76f2c59ef8
[Firefox: 4 hits: 07-24 to 09-14]		 none[none]
none [none]		 Win2K-f 31 of 35 03:48:55 03:48:55 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
cc56d1daf5
NEW		 none[none] WinXP 34 of 36 17:27:20 17:27:20 1 none none:none
 none|none none none
8c45399d60
NEW
b5919931fe
[Firefox:642 hits: 06-20 to 09-23]		 none[none]
b5919931fe[1]		 Win2K-f 0 of 32 00:43:02 23:02:39 7 none none:none
ASM:Graph
 none|none
ASProtect|		 48% none
lines=90		 none
trace
7771a39386
NEW		 none[none] Win2K-f
WinXP		 23 of 36 03:02:30 18:46:15 2 none none:none
 none|none none none
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]
57ce4acac2
[Firefox:200 hits: 06-17 to 09-23]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 01:21:25 18:35:45 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
039e3fa376
[Firefox: 4 hits: 07-24 to 09-14]		 none[none] Win2K-f 33 of 35 03:48:55 03:48:55 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:417 hits: 12-31 to 09-23]		 048df78048 [0] WinXP 29 of 29 15:12:06 23:42:58 6 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]
a08f3b74a4
[Firefox:845 hits: 06-18 to 09-23]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 01:15:50 22:16:01 16 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
[Firefox:17 hits: 09-13 to 09-23]		 none[none] WinXP 36 of 36 08:20:47 08:20:47 1 none none:none
 none|none none none
7f89b38665
[Firefox:15 hits: 08-02 to 09-20]
a51a50404e
[Firefox:15 hits: 08-02 to 09-20]		 none[none]
none [none]		 WinXP 34 of 36 23:35:04 23:35:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
34b0957281
NEW		 none[none] WinXP 31 of 36 19:38:38 19:38:38 1 none none:none
 none|none none none
09c3d90250
[Firefox: 7 hits: 08-04 to 09-17]
8f34a39070
[Firefox: 7 hits: 08-04 to 09-17]		 none[none]
none [none]		 Win2K-f 34 of 36 03:29:20 03:29:20 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0474b4b09f
NEW
1c3210698a
NEW		 none[none]
none [none]		 Win2K-f 29 of 33 22:56:35 22:56:35 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6dcb69f95a
[Firefox: 4 hits: 09-14 to 09-19]		 none[none] WinXP 11 of 36 03:23:26 03:23:26 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:110 hits: 01-03 to 09-22]		 d9e9662db1 [0] WinXP 29 of 29 14:13:34 15:37:36 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
87e1117f2a
[Firefox: 8 hits: 07-18 to 09-21]
b4fe4581c3
[Firefox: 8 hits: 07-18 to 09-21]		 none[none]
none [none]		 WinXP 29 of 33 04:24:19 04:24:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2e9f4c97cc
NEW		 none[none] WinXP 34 of 36 06:31:32 06:31:32 1 none none:none
 none|none none none
c5f4efea24
NEW		 none[none] WinXP 32 of 36 01:02:36 01:02:36 1 none none:none
 none|none none none
168aab35a3
[Firefox:135 hits: 06-17 to 09-23]
f7738e7352
[Firefox: 6 hits: 07-25 to 09-17]		 none[4]
none [none]		 Win2K-f 33 of 35 05:51:18 05:51:18 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
acc3005a65
NEW		 none[none] WinXP 14 of 36 07:54:52 07:54:52 1 none none:none
 none|none none none
4b2541d5f7
[Firefox: 8 hits: 08-19 to 09-12]		 none[none] WinXP 35 of 36 11:36:28 11:36:28 1 none none:none
 none|none none none
cc263a661d
NEW		 none[none] WinXP 36 of 36 13:39:51 13:39:51 1 none none:none
 none|none none none
df17a625ee
[Firefox:249 hits: 01-01 to 09-23]		 9bbdd086c5 [0] WinXP 29 of 29 03:47:40 03:47:40 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
80d03739c2
NEW
ec40b809c1
NEW		 none[none]
none [none]		 WinXP 33 of 36 22:29:33 22:29:33 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
986b59708d
[Firefox:82 hits: 01-14 to 09-23]		 8a00217866 [0] WinXP 29 of 29 17:21:38 17:21:38 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
a970a83d8e
NEW		 none[none] WinXP 6 of 36 02:41:11 02:41:11 1 none none:none
 none|none none none
2a0ee3c795
[Firefox: 6 hits: 09-13 to 09-18]
68b45529a0
NEW		 none[none]
none [none]		 Win2K-f 23 of 36 08:54:25 08:54:25 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0ada72d805
[Firefox:20 hits: 01-16 to 08-01]		 239ec78f15 [0] WinXP 29 of 29 06:51:08 06:51:08 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
d6df3972a0
[Firefox:31 hits: 01-07 to 08-20]		 39eeef52a4 [0] WinXP 29 of 29 05:53:21 05:53:21 1 none ASM:Graph
 PolyEnE| 100% lines=65 trace
946e32b980
NEW		 none[none] WinXP 21 of 31 12:49:26 12:49:26 1 none none:none
 none|none none none
bca9e0fb5f
[Firefox:29 hits: 06-18 to 09-23]
e53a9ea82e
[Firefox:29 hits: 06-18 to 09-23]		 none[4]
e53a9ea82e[1]		 Win2K-f 23 of 33 01:19:59 01:19:59 1 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
7104325f8d
NEW		 none[none] WinXP 35 of 36 04:08:59 04:08:59 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2415 hits: 06-17 to 09-23]
73f1082158
[Firefox:1195 hits: 06-18 to 09-23]
e07c29c4ae
[Firefox:491 hits: 06-19 to 09-23]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 10:15:25 21:19:57 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
0381578ce5
NEW		 none[none] WinXP 35 of 36 13:22:58 13:22:58 1 none none:none
 none|none none none
eca9a5fa95
[Firefox:18 hits: 08-09 to 09-21]		 none[none] WinXP 36 of 36 13:11:27 13:11:27 1 none none:none
 none|none none none
7f60162c2c
[Firefox:617 hits: 12-31 to 09-23]		 1aad8e4632 [0] WinXP 25 of 25 04:24:24 17:02:41 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
2a0ee3c795
[Firefox: 6 hits: 09-13 to 09-18]
68b45529a0
NEW
776985f561
[Firefox:14 hits: 06-24 to 09-20]		 none[none]
none [none]
776985f561[1]		 Win2K-f 31 of 33 08:54:25 08:54:25 1 none none:none
none:none
ASM:Graph
 none|none
none|none
Armadillo|		 47% none
none
lines=82		 none
none
trace
e9ee0d4d34
[Firefox: 2 hits: 09-15 to 09-21]		 none[none] WinXP 24 of 36 22:04:33 22:04:33 1 none none:none
 none|none none none
d2c52914ed
NEW		 none[none] WinXP 34 of 36 12:20:17 13:01:33 4 none none:none
 none|none none none
ea096a2bdf
[Firefox:15 hits: 07-12 to 08-09]		 none[none] WinXP 31 of 32 23:33:16 23:33:16 1 none none:none
 none|none none none
c5f4efea24
NEW
e9991938b3
NEW		 none[none]
none [none]		 WinXP 34 of 36 01:02:36 01:02:36 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4c3df24b32
[Firefox:191 hits: 06-17 to 09-23]
545b3dcf9f
NEW		 4c3df24b32 [1]
none [none]		 WinXP 34 of 36 18:37:30 18:37:30 1 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
6de4e92186
NEW		 none[none] WinXP
Win2K-f		 10 of 36 06:37:33 23:50:50 3 none none:none
 none|none none none
3ae357d17b
[Firefox:175 hits: 01-01 to 09-23]		 462a7be171 [0] WinXP 29 of 29 12:45:33 12:45:33 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
7d99b0e910
[Firefox:1147 hits: 12-31 to 09-23]		 7a70e1b592 [0] WinXP 26 of 28 03:21:07 16:45:25 6 none ASM:Graph
 PolyEnE| 99% lines=68 trace
6cf11d6364
[Firefox: 9 hits: 09-12 to 09-16]		 none[none] WinXP 36 of 36 07:59:17 07:59:18 2 none none:none
 none|none none none
18369c36f5
NEW		 none[none] Win2K-f
WinXP		 30 of 35 14:42:34 19:34:25 2 none none:none
 none|none none none
2a0ee3c795
[Firefox: 6 hits: 09-13 to 09-18]
68b45529a0
NEW
776985f561
[Firefox:14 hits: 06-24 to 09-20]
8ec6129efe
[Firefox:14 hits: 06-24 to 09-20]		 none[none]
none [none]
776985f561[1]
none [4]		 Win2K-f 31 of 33 08:54:25 08:54:25 1 none none:none
none:none
ASM:Graph
none:none
 none|none
none|none
Armadillo|
tElock|		 none
none
lines=82
none		 none
none
trace
trace
0381578ce5
NEW
e925af3417
NEW		 none[none]
none [none]		 WinXP 5 of 36 13:22:58 13:22:58 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2e04b06527
[Firefox: 8 hits: 06-18 to 09-16]		 none[4] Win2K-f 30 of 33 16:19:09 16:19:09 1 none none:none
 tElock| none trace
09c3d90250
[Firefox: 7 hits: 08-04 to 09-17]		 none[none] Win2K-f 32 of 36 03:29:20 03:29:20 1 none none:none
 none|none none none
e540a70fe0
NEW		 none[none] WinXP 36 of 36 09:29:49 09:29:49 1 none none:none
 none|none none none
475d9a7753
[Firefox: 3 hits: 06-22 to 09-15]
e9a7fa27d5
[Firefox: 3 hits: 06-22 to 09-15]		 none[4]
e9a7fa27d5[1]		 Win2K-f 30 of 32 11:21:03 11:21:03 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace