Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



25 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
3db2c812c0
[Firefox: 4 hits: 07-23 to 09-17]
none[none] WinXP 31 of 33 13:48:17 13:48:17 1 none none:none
none|none none none
29da5b359b
NEW
677277c61d
NEW
none[none]
none [none]
WinXP 32 of 36 21:23:50 23:25:56 2 none none:none
none:none
none|none
none|none
none
none
none
none
1486739c36
NEW
none[none] Win2K-f 12 of 36 19:54:43 19:54:43 1 none none:none
none|none none none
7ba9e53288
[Firefox: 5 hits: 07-11 to 09-21]
none[none] WinXP 31 of 33 07:26:54 13:38:11 2 none none:none
none|none none none
9c037c69f6
[Firefox: 4 hits: 04-21 to 09-22]
none[3] WinXP 27 of 32 18:43:22 18:43:22 1 none none:none
ASPack| none trace
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
73f1082158
[Firefox:1210 hits: 06-18 to 09-24]
none[4]
73f1082158[1]
WinXP
Win2K-f
0 of 32 02:01:36 23:52:38 17 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
73f1082158
[Firefox:1210 hits: 06-18 to 09-24]
a668cfca54
NEW
73f1082158 [1]
none [none]
Win2K-f 13 of 36 19:56:18 19:56:18 1 none ASM:Graph
none:none
Armadillo|
none|none
lines=81
none
trace
none
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
91dc355a93
NEW
bea8cb1865
[Firefox:15 hits: 08-11 to 09-23]
e07c29c4ae
[Firefox:496 hits: 06-19 to 09-24]
e3d3a5754d
NEW
none[4]
none [none]
none [none]
e07c29c4ae[1]
none [none]
WinXP 12 of 36 17:18:53 17:18:53 1 none none:none
none:none
none:none
ASM:Graph
none:none
tElock|
none|none
none|none
FSG|
none|none
none
none
none
lines=92
none
trace
none
none
trace
none
22999be88c
[Firefox:21 hits: 04-05 to 09-22]
eda2056971 [0] WinXP 31 of 32 10:25:35 10:25:35 1 none ASM:Graph
PolyEnE| 100% lines=154
embedded dns
trace
28ce5fc467
NEW
e7335cb667
NEW
none[none]
none [none]
Win2K-f 33 of 36 08:12:49 21:09:22 3 none none:none
none:none
none|none
none|none
none
none
none
none
2851817490
[Firefox: 6 hits: 06-27 to 09-14]
none[none] Win2K-f 32 of 33 07:38:28 07:38:28 1 none none:none
none|none none none
a639f0b353
NEW
none[none] WinXP 34 of 36 09:51:37 09:51:37 1 none none:none
none|none none none
c3bc53e727
[Firefox: 3 hits: 09-14 to 09-22]
none[none] WinXP 33 of 36 06:31:45 06:31:48 2 none none:none
none|none none none
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
none[4] WinXP
Win2K-f
33 of 33 01:26:58 23:52:38 28 none none:none
tElock| none trace
3f0a5b2ebe
[Firefox:18 hits: 06-18 to 08-29]
c6bfb5f0f2
[Firefox:18 hits: 06-18 to 08-29]
none[4]
c6bfb5f0f2[1]
Win2K-f 28 of 32 04:27:20 04:27:20 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
29da5b359b
NEW
none[none] WinXP 34 of 36 21:23:50 23:25:56 2 none none:none
none|none none none
37be569696
NEW
none[none] Win2K-f 33 of 36 04:16:15 04:16:15 1 none none:none
none|none none none
3db2c812c0
[Firefox: 4 hits: 07-23 to 09-17]
797fdec34a
[Firefox: 4 hits: 07-23 to 09-17]
none[none]
none [none]
WinXP 30 of 35 13:48:17 13:48:17 1 none none:none
none:none
none|none
none|none
none
none
none
none
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
b7082104e4
[Firefox:148 hits: 06-18 to 09-24]
none[4]
none [4]
WinXP 8 of 33 11:15:54 11:15:54 1 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
0474b4b09f
NEW
none[none] Win2K-f 34 of 36 11:23:28 11:23:28 1 none none:none
none|none none none
55d816f3e9
[Firefox: 3 hits: 09-20 to 09-24]
none[none] Win2K-f 33 of 36 04:07:11 04:07:11 1 none none:none
none|none none none
214bc429e1
NEW
none[none] Win2K-f 34 of 36 04:30:01 04:30:01 1 none none:none
none|none none none
168aab35a3
[Firefox:138 hits: 06-17 to 09-24]
none[4] Win2K-f 31 of 33 17:54:29 17:54:29 1 none none:none
tElock| none trace
5ed9c4adac
NEW
none[none] WinXP 33 of 36 14:09:31 14:09:31 1 none none:none
none|none none none
a12cab51ef
[Firefox:532 hits: 01-01 to 09-24]
40f7f463c4 [0] WinXP 29 of 29 04:09:02 22:45:26 6 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
18369c36f5
[Firefox: 2 hits: 09-24 to 09-24]
e1cf89c22d
[Firefox: 2 hits: 09-24 to 09-24]
none[none]
none [none]
Win2K-f 33 of 36 18:35:05 18:35:05 1 none none:none
none:none
none|none
none|none
none
none
none
none
83959d63ea
[Firefox: 2 hits: 09-15 to 09-18]
none[none] WinXP 35 of 36 18:59:19 18:59:19 1 none none:none
none|none none none
03f912899b
[Firefox:138 hits: 01-08 to 09-24]
83893bd25d [0] WinXP 32 of 32 02:51:37 04:19:04 2 none ASM:Graph
none|none 100% lines=65 trace
86176b6a8e
NEW
8a7d6cc74f
NEW
91dc355a93
NEW
ac0e6165e5
NEW
none[none]
none [none]
none [none]
none [none]
WinXP 12 of 36 15:39:22 15:39:22 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
57724f341d
NEW
81bc4d7149
NEW
none[none]
none [none]
WinXP 28 of 36 11:31:27 11:31:27 1 none none:none
none:none
none|none
none|none
none
none
none
none
55d816f3e9
[Firefox: 3 hits: 09-20 to 09-24]
84a24d85f7
[Firefox: 3 hits: 09-20 to 09-24]
none[none]
none [none]
Win2K-f 34 of 36 04:07:11 04:07:11 1 none none:none
none:none
none|none
none|none
none
none
none
none
1486739c36
NEW
91dc355a93
NEW
ba4637f8f0
[Firefox:12 hits: 07-01 to 09-20]
d02ae67164
[Firefox:12 hits: 07-01 to 09-20]
none[none]
none [none]
none [none]
none [none]
Win2K-f 31 of 33 19:54:43 19:54:43 1 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
726638fb22
NEW
none[none] WinXP 34 of 36 05:36:47 05:36:47 1 none none:none
none|none none none
168aab35a3
[Firefox:138 hits: 06-17 to 09-24]
667f0c59f3
[Firefox:24 hits: 07-04 to 09-20]
91dc355a93
NEW
b807e46328
NEW
cc2f861b1c
NEW
none[4]
none [none]
none [none]
none [none]
none [none]
Win2K-f 0 of 36 17:54:29 17:54:29 1 none none:none
none:none
none:none
none:none
none:none
tElock|
none|none
none|none
none|none
none|none
none
none
none
none
none
trace
none
none
none
none
168aab35a3
[Firefox:138 hits: 06-17 to 09-24]
667f0c59f3
[Firefox:24 hits: 07-04 to 09-20]
none[4]
none [none]
Win2K-f 31 of 33 17:54:29 17:54:29 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
35c717e9d0
NEW
none[none] WinXP 12 of 36 15:49:41 15:49:41 1 none none:none
none|none none none
4de1b987a6
NEW
none[none] WinXP 27 of 36 15:40:57 15:40:57 1 none none:none
none|none none none
741e3b03b3
[Firefox:399 hits: 01-05 to 09-24]
e0197e8a64 [0] WinXP 31 of 32 06:02:30 23:00:20 4 none ASM:Graph
none|none 100% lines=62 trace
f353d4eed9
[Firefox:16 hits: 09-17 to 09-24]
none[none] WinXP 35 of 36 02:49:10 22:41:48 2 none none:none
none|none none none
91dc355a93
NEW
b632266bbd
NEW
none[none]
none [none]
WinXP 35 of 36 14:40:56 14:40:56 1 none none:none
none:none
none|none
none|none
none
none
none
none
96dd1ffa53
NEW
none[none] WinXP 34 of 36 13:00:50 13:00:50 1 none none:none
none|none none none
e1b693266c
NEW
none[none] WinXP 34 of 36 04:07:13 04:07:13 1 none none:none
none|none none none
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
91dc355a93
NEW
bea8cb1865
[Firefox:15 hits: 08-11 to 09-23]
none[4]
none [none]
none [none]
WinXP 32 of 36 17:18:53 17:18:53 1 none none:none
none:none
none:none
tElock|
none|none
none|none
none
none
none
trace
none
none
c7428c259b
NEW
none[none] WinXP 11 of 36 14:06:59 14:06:59 1 none none:none
none|none none none
831f4ee0a7
[Firefox:559 hits: 01-01 to 09-24]
eb7546c600 [0] WinXP 29 of 29 03:04:43 20:23:42 4 none ASM:Graph
none|none 100% lines=61 trace
a8c074e136
NEW
none[none] WinXP 34 of 36 19:32:58 19:32:58 1 none none:none
none|none none none
1724b36f09
NEW
none[none] WinXP 34 of 36 04:09:37 04:09:37 1 none none:none
none|none none none
3f0a5b2ebe
[Firefox:18 hits: 06-18 to 08-29]
none[4] Win2K-f 32 of 33 04:27:20 04:27:20 1 none none:none
PolyEnE| none trace
335cd761e7
NEW
none[none] WinXP 0 of 0 06:36:10 06:36:10 1 none none:none
none|none none none
17028f1eda
[Firefox:35 hits: 04-18 to 09-22]
none[3] Win2K-f
WinXP
31 of 32 13:38:34 13:56:10 2 none none:none
tElock| none trace
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
73f1082158
[Firefox:1210 hits: 06-18 to 09-24]
b5919931fe
[Firefox:649 hits: 06-20 to 09-24]
none[4]
73f1082158[1]
b5919931fe[1]
Win2K-f 0 of 32 03:06:16 23:14:53 5 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect|
48% none
lines=81
lines=90
trace
trace
trace
15ee4e7627
NEW
none[none] WinXP 35 of 36 10:37:13 10:37:13 1 none none:none
none|none none none
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
57ce4acac2
[Firefox:203 hits: 06-17 to 09-24]
none[4]
57ce4acac2[1]
Win2K-f 0 of 33 02:18:06 02:18:06 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
40870345c3
NEW
none[none] Win2K-f 0 of 0 21:14:17 23:27:03 2 none none:none
none|none none none
1a2c0e6130
[Firefox:423 hits: 12-31 to 09-24]
048df78048 [0] WinXP 29 of 29 05:46:30 16:38:10 4 none ASM:Graph
none|none 100% lines=61 trace
53bfe15e91
[Firefox:2452 hits: 06-17 to 09-24]
a08f3b74a4
[Firefox:861 hits: 06-18 to 09-24]
none[4]
a08f3b74a4[1]
WinXP
Win2K-f
0 of 33 01:26:58 17:24:12 11 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
b872c76081
[Firefox:18 hits: 09-13 to 09-24]
none[none] WinXP 36 of 36 15:01:05 18:42:14 2 none none:none
none|none none none
09c3d90250
[Firefox: 8 hits: 08-04 to 09-24]
8f34a39070
[Firefox: 8 hits: 08-04 to 09-24]
none[none]
none [none]
Win2K-f 34 of 36 13:13:26 13:13:26 1 none none:none
none:none
none|none
none|none
none
none
none
none
6dcb69f95a
[Firefox: 5 hits: 09-14 to 09-24]
none[none] Win2K-f 11 of 36 21:07:16 21:07:16 1 none none:none
none|none none none
0474b4b09f
NEW
1c3210698a
[Firefox: 2 hits: 07-13 to 09-24]
none[none]
none [none]
Win2K-f 29 of 33 11:23:28 11:23:28 1 none none:none
none:none
none|none
none|none
none
none
none
none
a0139d7ad8
[Firefox:113 hits: 01-03 to 09-24]
d9e9662db1 [0] WinXP 29 of 29 03:28:51 21:21:43 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
1e1f8459d6
NEW
none[none] Win2K-f 11 of 36 20:47:59 20:47:59 1 none none:none
none|none none none
b4397cd867
NEW
b455f223d6
[Firefox: 2 hits: 06-20 to 09-14]
none[none]
b455f223d6[1]
Win2K-f 27 of 32 03:06:16 03:06:16 1 none none:none
ASM:Graph
none|none
Armadillo|
47% none
lines=81
none
trace
c6059fcbd5
NEW
none[none] WinXP 34 of 36 17:20:06 17:20:06 1 none none:none
none|none none none
2851817490
[Firefox: 6 hits: 06-27 to 09-14]
624c441842
[Firefox: 3 hits: 06-27 to 08-24]
none[none]
none [none]
Win2K-f 9 of 33 07:38:28 07:38:28 1 none none:none
none:none
none|none
none|none
none
none
none
none
a8c074e136
NEW
fc22cbd605
NEW
none[none]
none [none]
WinXP 32 of 36 19:32:58 19:32:58 1 none none:none
none:none
none|none
none|none
none
none
none
none
37be569696
NEW
b2fa7ba3a5
NEW
none[none]
none [none]
Win2K-f 34 of 36 04:16:15 04:16:15 1 none none:none
none:none
none|none
none|none
none
none
none
none
cc263a661d
NEW
none[none] WinXP 36 of 36 08:24:25 13:25:20 3 none none:none
none|none none none
07fabc79ef
[Firefox:14 hits: 06-19 to 08-15]
07fabc79ef [1] Win2K-f 0 of 32 21:20:25 21:20:25 1 none ASM:Graph
Armadillo| 47% lines=81 trace
40870345c3
NEW
6c539a9f23
NEW
none[none]
none [none]
Win2K-f 0 of 0 21:14:17 23:27:03 2 none none:none
none:none
none|none
none|none
none
none
none
none
3373948767
[Firefox:25 hits: 07-03 to 09-20]
c73f738c30
[Firefox:25 hits: 07-03 to 09-20]
none[none]
none [none]
Win2K-f 29 of 33 14:26:59 14:26:59 1 none none:none
none:none
none|none
none|none
none
none
none
none
df17a625ee
[Firefox:250 hits: 01-01 to 09-24]
9bbdd086c5 [0] WinXP 29 of 29 10:17:56 14:04:12 4 none ASM:Graph
ASPack| 49% lines=186
embedded dns
trace
57724f341d
NEW
none[none] WinXP 35 of 36 11:31:27 11:31:27 1 none none:none
none|none none none
168aab35a3
[Firefox:138 hits: 06-17 to 09-24]
667f0c59f3
[Firefox:24 hits: 07-04 to 09-20]
91dc355a93
NEW
b807e46328
NEW
cc2f861b1c
NEW
d9ac68f184
NEW
f3cef1936d
NEW
none[4]
none [none]
none [none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 12 of 36 17:54:29 17:54:29 1 none none:none
none:none
none:none
none:none
none:none
none:none
none:none
tElock|
none|none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
trace
none
none
none
none
none
none
986b59708d
[Firefox:83 hits: 01-14 to 09-24]
8a00217866 [0] WinXP 29 of 29 09:16:39 09:16:46 2 none ASM:Graph
PolyEnE| 100% lines=57 trace
b9e6a0c882
[Firefox: 5 hits: 09-12 to 09-23]
none[none] WinXP 35 of 35 07:15:53 11:41:40 2 none none:none
none|none none none
516f7aaac5
[Firefox: 6 hits: 09-19 to 09-21]
none[none] WinXP 35 of 36 11:43:00 23:39:12 2 none none:none
none|none none none
28ce5fc467
NEW
none[none] Win2K-f 31 of 36 08:12:49 21:09:22 3 none none:none
none|none none none
29da5b359b
NEW
677277c61d
NEW
e07c29c4ae
[Firefox:496 hits: 06-19 to 09-24]
none[none]
none [none]
e07c29c4ae[1]
WinXP 0 of 33 15:39:22 21:23:50 4 none none:none
none:none
ASM:Graph
none|none
none|none
FSG|
48% none
none
lines=92
none
none
trace
49d6cdaab4
[Firefox: 4 hits: 09-13 to 09-23]
none[none] WinXP 34 of 36 06:47:53 11:18:01 2 none none:none
none|none none none
8b76719555
NEW
none[none] WinXP 35 of 36 06:29:12 10:49:57 3 none none:none
none|none none none
7f60162c2c
[Firefox:622 hits: 12-31 to 09-24]
1aad8e4632 [0] WinXP 25 of 25 09:35:05 23:39:50 4 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
126a1d4446
[Firefox: 3 hits: 08-19 to 09-18]
none[none] Win2K-f 35 of 36 21:17:31 21:17:31 1 none none:none
none|none none none
1e1f8459d6
NEW
91dc355a93
NEW
none[none]
none [none]
WinXP
Win2K-f
15 of 36 14:40:56 20:47:59 7 none none:none
none:none
none|none
none|none
none
none
none
none
5ab10310c8
NEW
none[none] WinXP 35 of 36 10:45:35 10:45:35 1 none none:none
none|none none none
2d815d2be3
NEW
none[none] WinXP 34 of 36 19:01:39 19:01:39 1 none none:none
none|none none none
35c717e9d0
NEW
86176b6a8e
NEW
none[none]
none [none]
WinXP 34 of 35 15:39:22 15:49:41 2 none none:none
none:none
none|none
none|none
none
none
none
none
d67052824c
[Firefox: 2 hits: 09-21 to 09-21]
none[none] WinXP 35 of 36 07:12:38 07:12:38 1 none none:none
none|none none none
ea096a2bdf
[Firefox:16 hits: 07-12 to 09-24]
none[none] WinXP 31 of 32 08:13:06 08:13:06 1 none none:none
none|none none none
3373948767
[Firefox:25 hits: 07-03 to 09-20]
none[none] Win2K-f 30 of 33 14:26:59 14:26:59 1 none none:none
none|none none none
1486739c36
NEW
91dc355a93
NEW
ba4637f8f0
[Firefox:12 hits: 07-01 to 09-20]
d02ae67164
[Firefox:12 hits: 07-01 to 09-20]
d9ac68f184
NEW
none[none]
none [none]
none [none]
none [none]
none [none]
Win2K-f 0 of 36 17:54:29 19:54:43 2 none none:none
none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
none
none
168aab35a3
[Firefox:138 hits: 06-17 to 09-24]
667f0c59f3
[Firefox:24 hits: 07-04 to 09-20]
91dc355a93
NEW
b807e46328
NEW
none[4]
none [none]
none [none]
none [none]
Win2K-f 11 of 36 17:54:29 17:54:29 1 none none:none
none:none
none:none
none:none
tElock|
none|none
none|none
none|none
none
none
none
none
trace
none
none
none
1c544ae06d
NEW
none[none] WinXP 35 of 36 16:55:07 16:55:29 2 none none:none
none|none none none
7ba9e53288
[Firefox: 5 hits: 07-11 to 09-21]
d2e7fab9c3
[Firefox: 5 hits: 07-11 to 09-21]
none[none]
none [none]
WinXP 29 of 33 07:26:54 13:38:11 2 none none:none
none:none
none|none
none|none
none
none
none
none
6de4e92186
[Firefox: 3 hits: 09-24 to 09-24]
none[none] WinXP 10 of 36 17:42:10 17:42:10 1 none none:none
none|none none none
3ae357d17b
[Firefox:176 hits: 01-01 to 09-24]
462a7be171 [0] WinXP 29 of 29 12:49:25 12:49:25 1 none ASM:Graph
PolyEnE| 99% lines=73 trace
1486739c36
NEW
91dc355a93
NEW
ba4637f8f0
[Firefox:12 hits: 07-01 to 09-20]
none[none]
none [none]
none [none]
Win2K-f 28 of 33 19:54:43 19:54:43 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
d958d1df14
NEW
none[none] WinXP 34 of 36 04:34:05 04:34:32 2 none none:none
none|none none none
73f1082158
[Firefox:1210 hits: 06-18 to 09-24]
79c01ec060
[Firefox:41 hits: 06-18 to 09-23]
73f1082158 [1]
none [4]
WinXP 33 of 33 19:00:30 19:00:30 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
7d99b0e910
[Firefox:1153 hits: 12-31 to 09-24]
7a70e1b592 [0] WinXP 26 of 28 00:32:20 18:17:28 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
18369c36f5
[Firefox: 2 hits: 09-24 to 09-24]
none[none] Win2K-f 30 of 35 18:35:05 18:35:05 1 none none:none
none|none none none
214bc429e1
NEW
9ad48d782a
NEW
none[none]
none [none]
Win2K-f 32 of 36 04:30:01 04:30:01 1 none none:none
none:none
none|none
none|none
none
none
none
none
ab5e47bf8d
[Firefox:40 hits: 01-02 to 09-23]
none[3] WinXP 29 of 29 15:09:16 15:09:16 1 none none:none
ASPack| none trace
b4397cd867
NEW
none[none] Win2K-f 34 of 36 03:06:16 03:06:16 1 none none:none
none|none none none
09c3d90250
[Firefox: 8 hits: 08-04 to 09-24]
none[none] Win2K-f 32 of 36 13:13:26 13:13:26 1 none none:none
none|none none none
35c717e9d0
NEW
86176b6a8e
NEW
8a7d6cc74f
NEW
none[none]
none [none]
none [none]
WinXP 32 of 36 15:39:22 15:49:41 2 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none