Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



28 September 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
83c5c9c5c9
NEW
none[none] Win2K-f 14 of 36 04:51:02 04:51:02 1 none none:none
none|none none none
6a7fb64400
NEW
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
91dc355a93
[Firefox:18 hits: 09-25 to 09-27]
b5919931fe
[Firefox:666 hits: 06-20 to 09-27]
da00a8e7a1
[Firefox:21 hits: 08-05 to 09-27]
e9b5f1306e
NEW
f685f8e027
[Firefox:25 hits: 06-18 to 09-27]
none[none]
none [none]
none [none]
b5919931fe[1]
none [none]
none [none]
f685f8e027[1]
Win2K-f 28 of 33 14:26:59 14:26:59 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
ASM:Graph
none|none
none|none
none|none
ASProtect|
none|none
none|none
Armadillo|
48% none
none
none
lines=90
none
none
lines=82
none
none
none
trace
none
none
trace
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
73f1082158
[Firefox:1262 hits: 06-18 to 09-27]
none[4]
73f1082158[1]
Win2K-f
WinXP
0 of 32 01:19:52 23:05:08 18 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
22999be88c
[Firefox:23 hits: 04-05 to 09-27]
eda2056971 [0] WinXP 31 of 32 21:23:19 21:23:19 1 none ASM:Graph
PolyEnE| 100% lines=154
embedded dns
trace
1ec0fd8c30
NEW
none[none] WinXP 33 of 35 08:22:33 08:22:33 1 none none:none
none|none none none
28ce5fc467
[Firefox: 4 hits: 09-12 to 09-25]
b5919931fe
[Firefox:666 hits: 06-20 to 09-27]
e7335cb667
[Firefox: 4 hits: 09-12 to 09-25]
none[none]
b5919931fe[1]
none [none]
Win2K-f 33 of 36 00:39:56 00:39:56 1 none none:none
ASM:Graph
none:none
none|none
ASProtect|
none|none
none
lines=90
none
none
trace
none
c699b15f19
NEW
none[none] WinXP 25 of 36 15:22:20 15:22:20 1 none none:none
none|none none none
1fcc146d70
[Firefox:50 hits: 01-02 to 09-24]
258fafe892 [0] WinXP 29 of 29 14:48:40 14:48:40 1 none ASM:Graph
PolyEnE| 99% lines=68 trace
4e56b449dc
NEW
none[none] Win2K-f 32 of 36 14:06:12 14:06:12 1 none none:none
none|none none none
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
none[4] Win2K-f
WinXP
33 of 33 01:19:52 23:08:21 35 none none:none
tElock| none trace
1eacab1cc9
NEW
none[none] Win2K-f 34 of 36 05:49:08 05:49:08 1 none none:none
none|none none none
3f0a5b2ebe
[Firefox:20 hits: 06-18 to 09-27]
c6bfb5f0f2
[Firefox:20 hits: 06-18 to 09-27]
none[4]
c6bfb5f0f2[1]
WinXP 28 of 32 00:30:23 00:30:23 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=81
trace
trace
1951eee0cd
[Firefox:10 hits: 06-18 to 09-27]
e5e0dbde57
[Firefox:10 hits: 06-18 to 09-27]
1951eee0cd [1]
none [4]
Win2K-f 31 of 33 19:23:57 19:23:57 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
22caea986a
NEW
none[none] WinXP 32 of 36 22:46:46 22:46:46 1 none none:none
none|none none none
e4ed963a77
[Firefox: 5 hits: 09-18 to 09-22]
none[none] WinXP 36 of 36 14:35:12 14:35:12 1 none none:none
none|none none none
c295ae7d97
[Firefox: 2 hits: 09-21 to 09-22]
dd1fe232e8
[Firefox: 2 hits: 09-21 to 09-22]
none[none]
none [none]
Win2K-f 32 of 36 23:58:46 23:58:46 1 none none:none
none:none
none|none
none|none
none
none
none
none
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
b7082104e4
[Firefox:150 hits: 06-18 to 09-27]
none[4]
none [4]
Win2K-f 8 of 33 03:22:50 14:45:43 2 none none:none
none:none
tElock|
tElock|
none
none
trace
trace
8ef9e03ad3
[Firefox: 2 hits: 09-12 to 09-16]
none[none] WinXP 34 of 36 14:28:03 14:28:30 2 none none:none
none|none none none
0474b4b09f
[Firefox: 2 hits: 09-24 to 09-25]
none[none] Win2K-f 34 of 36 04:29:45 04:29:45 1 none none:none
none|none none none
1951eee0cd
[Firefox:10 hits: 06-18 to 09-27]
1951eee0cd [1] Win2K-f 27 of 33 19:23:57 19:23:57 1 none ASM:Graph
Armadillo| 47% lines=82 trace
168aab35a3
[Firefox:144 hits: 06-17 to 09-27]
none[4] Win2K-f 31 of 33 19:39:35 19:39:35 1 none none:none
tElock| none trace
4c3df24b32
[Firefox:198 hits: 06-17 to 09-27]
99745b0c1d
NEW
4c3df24b32 [1]
none [none]
Win2K-f 34 of 36 06:01:38 06:01:38 1 none ASM:Graph
none:none
Armadillo|
none|none
lines=81
none
trace
none
c295ae7d97
[Firefox: 2 hits: 09-21 to 09-22]
none[none] Win2K-f 33 of 36 23:58:46 23:58:46 1 none none:none
none|none none none
fbe263609e
NEW
none[none] WinXP 35 of 36 15:05:49 15:05:49 1 none none:none
none|none none none
73ce2b74da
[Firefox:15 hits: 06-18 to 09-27]
73ce2b74da [1] Win2K-f 3 of 33 05:55:14 07:22:26 2 none ASM:Graph
Armadillo| 47% lines=81 trace
5ed9c4adac
[Firefox: 3 hits: 09-25 to 09-27]
none[none] WinXP 33 of 36 10:42:31 10:42:31 1 none none:none
none|none none none
a12cab51ef
[Firefox:541 hits: 01-01 to 09-27]
40f7f463c4 [0] WinXP 29 of 29 06:08:02 11:12:53 4 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
464a5bfd5b
[Firefox:12 hits: 09-27 to 09-27]
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
7452c8448d
[Firefox:14 hits: 06-17 to 09-21]
none[none]
none [none]
none [4]
Win2K-f 30 of 32 09:51:18 09:51:18 1 none none:none
none:none
none:none
none|none
none|none
PolyEnE|
none
none
none
none
none
trace
03f912899b
[Firefox:142 hits: 01-08 to 09-27]
83893bd25d [0] WinXP 32 of 32 19:42:34 19:42:34 1 none ASM:Graph
none|none 100% lines=65 trace
7dd1fe2970
[Firefox:20 hits: 02-03 to 09-27]
dcc673c815 [0] WinXP 30 of 32 16:11:36 16:11:36 1 none ASM:Graph
ASPack| 72% lines=374
embedded dns
trace
571e381ed4
[Firefox:10 hits: 09-14 to 09-20]
none[none] WinXP 35 of 36 13:32:40 13:32:40 1 none none:none
none|none none none
4c3df24b32
[Firefox:198 hits: 06-17 to 09-27]
4c3df24b32 [1] Win2K-f
WinXP
0 of 33 06:01:38 22:58:15 3 none ASM:Graph
Armadillo| 47% lines=81 trace
9963e9c1ff
[Firefox: 3 hits: 06-26 to 08-24]
none[none] Win2K-f 32 of 33 20:42:01 20:42:01 1 none none:none
none|none none none
3ff96af82f
NEW
none[none] WinXP 36 of 36 14:11:44 14:11:44 1 none none:none
none|none none none
4ef7771f3f
NEW
d29aef3217
NEW
none[none]
none [none]
Win2K-f 32 of 36 12:56:55 12:56:55 1 none none:none
none:none
none|none
none|none
none
none
none
none
168aab35a3
[Firefox:144 hits: 06-17 to 09-27]
667f0c59f3
[Firefox:25 hits: 07-04 to 09-25]
none[4]
none [none]
Win2K-f 31 of 33 19:39:35 19:39:35 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
4e56b449dc
NEW
cfbd74f042
NEW
none[none]
none [none]
Win2K-f 35 of 36 14:06:12 14:06:12 1 none none:none
none:none
none|none
none|none
none
none
none
none
4d244a981f
[Firefox: 8 hits: 03-30 to 07-11]
b66b85d85f [0] WinXP 30 of 31 10:15:07 10:15:07 1 none ASM:Graph
PolyEnE| 100% lines=129 trace
741e3b03b3
[Firefox:409 hits: 01-05 to 09-27]
e0197e8a64 [0] WinXP 31 of 32 04:24:39 20:04:20 4 none ASM:Graph
none|none 100% lines=62 trace
f353d4eed9
[Firefox:21 hits: 09-17 to 09-27]
none[none] WinXP 35 of 36 16:20:53 16:20:53 1 none none:none
none|none none none
464a5bfd5b
[Firefox:12 hits: 09-27 to 09-27]
none[none] Win2K-f 6 of 36 09:51:18 10:11:32 2 none none:none
none|none none none
dccd78bf99
NEW
none[none] WinXP 35 of 36 11:43:06 11:43:06 1 none none:none
none|none none none
831f4ee0a7
[Firefox:567 hits: 01-01 to 09-27]
eb7546c600 [0] WinXP 29 of 29 03:48:01 09:57:51 2 none ASM:Graph
none|none 100% lines=61 trace
f5501ecc1c
[Firefox: 2 hits: 09-24 to 09-24]
none[none] WinXP 34 of 36 14:10:40 14:10:40 1 none none:none
none|none none none
3f0a5b2ebe
[Firefox:20 hits: 06-18 to 09-27]
none[4] WinXP 32 of 33 00:30:23 00:30:23 1 none none:none
PolyEnE| none trace
42c8d9a857
NEW
none[none] WinXP 35 of 36 08:13:11 08:13:11 1 none none:none
none|none none none
17028f1eda
[Firefox:37 hits: 04-18 to 09-25]
none[3] WinXP 31 of 32 08:19:29 08:19:29 1 none none:none
tElock| none trace
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
a08f3b74a4
[Firefox:896 hits: 06-18 to 09-27]
b5919931fe
[Firefox:666 hits: 06-20 to 09-27]
none[4]
a08f3b74a4[1]
b5919931fe[1]
Win2K-f 0 of 32 00:39:56 22:20:26 10 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect|
48% none
lines=81
lines=90
trace
trace
trace
1eacab1cc9
NEW
d43f7bdb88
NEW
none[none]
none [none]
Win2K-f 22 of 36 05:49:08 05:49:08 1 none none:none
none:none
none|none
none|none
none
none
none
none
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
none[none] Win2K-f 15 of 36 09:51:18 19:57:08 6 none none:none
none|none none none
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
57ce4acac2
[Firefox:210 hits: 06-17 to 09-27]
none[4]
57ce4acac2[1]
Win2K-f 0 of 33 12:19:03 12:19:03 1 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
1a2c0e6130
[Firefox:433 hits: 12-31 to 09-27]
048df78048 [0] WinXP 29 of 29 11:21:15 19:31:20 5 none ASM:Graph
none|none 100% lines=61 trace
53bfe15e91
[Firefox:2547 hits: 06-17 to 09-27]
a08f3b74a4
[Firefox:896 hits: 06-18 to 09-27]
none[4]
a08f3b74a4[1]
WinXP
Win2K-f
0 of 33 01:50:22 23:08:21 13 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
b872c76081
[Firefox:28 hits: 09-13 to 09-27]
none[none] WinXP 36 of 36 11:13:43 11:13:43 1 none none:none
none|none none none
0c01728b7e
NEW
none[none] Win2K-f 36 of 36 03:57:38 05:53:31 2 none none:none
none|none none none
0474b4b09f
[Firefox: 2 hits: 09-24 to 09-25]
1c3210698a
[Firefox: 3 hits: 07-13 to 09-25]
none[none]
none [none]
Win2K-f 29 of 33 04:29:45 04:29:45 1 none none:none
none:none
none|none
none|none
none
none
none
none
3a813df3ed
[Firefox: 7 hits: 02-04 to 09-15]
7759abbf55 [0] WinXP 28 of 29 16:08:49 16:08:59 2 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
6a7fb64400
NEW
none[none] Win2K-f 5 of 36 14:26:59 14:26:59 1 none none:none
none|none none none
607b60ad51
[Firefox:38 hits: 06-20 to 09-20]
e07c29c4ae
[Firefox:514 hits: 06-19 to 09-27]
e5c7bce70e
[Firefox:37 hits: 06-20 to 09-20]
none[4]
e07c29c4ae[1]
e5c7bce70e[1]
WinXP 2 of 32 22:07:53 22:07:53 1 none none:none
ASM:Graph
ASM:Graph
tElock|
FSG|
Armadillo|
47% none
lines=92
lines=81
trace
trace
trace
83c5c9c5c9
NEW
aac2521c5b
NEW
none[none]
none [none]
Win2K-f 11 of 36 04:51:02 04:51:02 1 none none:none
none:none
none|none
none|none
none
none
none
none
cc263a661d
[Firefox: 6 hits: 09-24 to 09-27]
none[none] WinXP 36 of 36 13:30:55 17:09:02 2 none none:none
none|none none none
df17a625ee
[Firefox:256 hits: 01-01 to 09-27]
9bbdd086c5 [0] WinXP 29 of 29 03:36:37 07:49:05 2 none ASM:Graph
ASPack| 49% lines=186
embedded dns
trace
492341416e
NEW
none[none] WinXP 0 of 0 05:39:36 05:39:36 1 none none:none
none|none none none
e5dd743ec0
NEW
none[none] WinXP 35 of 36 07:31:15 07:31:15 1 none none:none
none|none none none
986b59708d
[Firefox:85 hits: 01-14 to 09-25]
8a00217866 [0] WinXP 29 of 29 07:38:41 07:38:41 1 none ASM:Graph
PolyEnE| 100% lines=57 trace
1cc5f013c3
NEW
b2c2ac778d
NEW
none[none]
none [none]
WinXP 35 of 36 02:51:21 02:51:21 1 none none:none
none:none
none|none
none|none
none
none
none
none
516f7aaac5
[Firefox: 8 hits: 09-19 to 09-25]
none[none] WinXP 35 of 36 13:47:23 13:47:23 1 none none:none
none|none none none
9963e9c1ff
[Firefox: 3 hits: 06-26 to 08-24]
a647a60592
[Firefox: 3 hits: 06-26 to 08-24]
none[none]
none [none]
Win2K-f 30 of 33 20:42:01 20:42:01 1 none none:none
none:none
none|none
none|none
none
none
none
none
27b945de66
[Firefox:25 hits: 06-20 to 09-27]
none[4] WinXP 31 of 32 05:01:26 05:01:26 1 none none:none
none|none none trace
b783511e9b
[Firefox: 5 hits: 01-26 to 02-27]
8d871feb5d [0] WinXP 31 of 31 01:22:47 01:22:47 1 none ASM:Graph
ASPack| 72% lines=396
embedded dns
trace
6a7fb64400
NEW
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
91dc355a93
[Firefox:18 hits: 09-25 to 09-27]
b5919931fe
[Firefox:666 hits: 06-20 to 09-27]
da00a8e7a1
[Firefox:21 hits: 08-05 to 09-27]
e9b5f1306e
NEW
none[none]
none [none]
none [none]
b5919931fe[1]
none [none]
none [none]
Win2K-f 7 of 36 14:26:59 14:26:59 1 none none:none
none:none
none:none
ASM:Graph
none:none
none:none
none|none
none|none
none|none
ASProtect|
none|none
none|none
none
none
none
lines=90
none
none
none
none
none
trace
none
none
28ce5fc467
[Firefox: 4 hits: 09-12 to 09-25]
none[none] Win2K-f 31 of 36 00:39:56 00:39:56 1 none none:none
none|none none none
a9cfbd1b0c
[Firefox:10 hits: 09-12 to 09-27]
none[none] WinXP 36 of 36 20:12:59 20:12:59 1 none none:none
none|none none none
1cc5f013c3
NEW
none[none] WinXP 32 of 36 02:51:21 02:51:21 1 none none:none
none|none none none
6e4189aed5
[Firefox: 2 hits: 08-09 to 08-10]
none[none] Win2K-f 35 of 36 03:29:00 03:29:00 1 none none:none
none|none none none
607b60ad51
[Firefox:38 hits: 06-20 to 09-20]
e07c29c4ae
[Firefox:514 hits: 06-19 to 09-27]
none[4]
e07c29c4ae[1]
WinXP 0 of 33 03:15:26 22:07:53 7 none none:none
ASM:Graph
tElock|
FSG|
48% none
lines=92
trace
trace
eca9a5fa95
[Firefox:20 hits: 08-09 to 09-26]
none[none] WinXP 36 of 36 08:05:02 08:05:02 1 none none:none
none|none none none
fe22b8315f
[Firefox: 8 hits: 06-19 to 09-13]
none[4] Win2K-f 32 of 33 02:42:39 02:42:39 1 none none:none
StarForce| none trace
e8cc9c1f8b
NEW
none[none] WinXP 34 of 35 12:09:51 12:09:51 1 none none:none
none|none none none
9d9e018ca3
NEW
none[none] WinXP 25 of 36 12:15:51 12:15:51 1 none none:none
none|none none none
6f48587848
[Firefox: 3 hits: 02-18 to 08-24]
0bc04966dd [0] Win2K-f 21 of 30 10:16:13 10:16:13 1 none none:none
none|none none trace
7f60162c2c
[Firefox:636 hits: 12-31 to 09-27]
1aad8e4632 [0] WinXP 25 of 25 05:13:16 23:13:25 5 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
6a7fb64400
NEW
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
91dc355a93
[Firefox:18 hits: 09-25 to 09-27]
none[none]
none [none]
none [none]
Win2K-f 15 of 36 14:26:59 14:26:59 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
6e4189aed5
[Firefox: 2 hits: 08-09 to 08-10]
a2abf80155
[Firefox: 2 hits: 08-09 to 08-10]
none[none]
none [none]
Win2K-f 32 of 36 03:29:00 03:29:00 1 none none:none
none:none
none|none
none|none
none
none
none
none
e9ee0d4d34
[Firefox: 3 hits: 09-15 to 09-24]
none[none] WinXP 24 of 36 18:59:00 18:59:00 1 none none:none
none|none none none
71b183b0c8
[Firefox: 6 hits: 09-17 to 09-27]
none[none] WinXP 36 of 36 09:29:24 09:29:24 1 none none:none
none|none none none
464a5bfd5b
[Firefox:12 hits: 09-27 to 09-27]
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
7452c8448d
[Firefox:14 hits: 06-17 to 09-21]
fd9b49840f
[Firefox: 8 hits: 06-23 to 09-21]
none[none]
none [none]
none [4]
fd9b49840f[1]
Win2K-f 0 of 0 09:51:18 09:51:18 1 none none:none
none:none
none:none
ASM:Graph
none|none
none|none
PolyEnE|
Armadillo|
47% none
none
none
lines=81
none
none
trace
trace
6a7fb64400
NEW
7085b2c2d6
[Firefox:15 hits: 09-27 to 09-27]
91dc355a93
[Firefox:18 hits: 09-25 to 09-27]
b5919931fe
[Firefox:666 hits: 06-20 to 09-27]
da00a8e7a1
[Firefox:21 hits: 08-05 to 09-27]
none[none]
none [none]
none [none]
b5919931fe[1]
none [none]
Win2K-f 34 of 36 14:26:59 14:26:59 1 none none:none
none:none
none:none
ASM:Graph
none:none
none|none
none|none
none|none
ASProtect|
none|none
none
none
none
lines=90
none
none
none
none
trace
none
4ef7771f3f
NEW
none[none] Win2K-f 35 of 36 12:56:55 12:56:55 1 none none:none
none|none none none
73ce2b74da
[Firefox:15 hits: 06-18 to 09-27]
79c01ec060
[Firefox:45 hits: 06-18 to 09-27]
73ce2b74da [1]
none [4]
Win2K-f 33 of 33 05:55:14 07:22:26 2 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
7d99b0e910
[Firefox:1172 hits: 12-31 to 09-27]
7a70e1b592 [0] WinXP 26 of 28 04:01:05 23:20:56 11 none ASM:Graph
PolyEnE| 99% lines=68 trace
dff860d114
NEW
none[none] WinXP 35 of 36 21:25:37 21:25:37 1 none none:none
none|none none none
22caea986a
NEW
b235125c92
NEW
none[none]
none [none]
WinXP 34 of 36 22:46:46 22:46:46 1 none none:none
none:none
none|none
none|none
none
none
none
none
1509c8d024
[Firefox:32 hits: 06-17 to 09-27]
e07c29c4ae
[Firefox:514 hits: 06-19 to 09-27]
f23b040440
[Firefox:21 hits: 06-22 to 09-23]
none[4]
e07c29c4ae[1]
f23b040440[1]
WinXP 30 of 32 09:16:03 09:16:03 1 none none:none
ASM:Graph
ASM:Graph
tElock|
FSG|
Armadillo|
47% none
lines=92
lines=82
trace
trace
trace
a5dfa6f948
NEW
none[none] WinXP 35 of 36 09:34:57 09:34:57 1 none none:none
none|none none none
1509c8d024
[Firefox:32 hits: 06-17 to 09-27]
none[4] WinXP 31 of 33 09:16:03 09:16:03 1 none none:none
tElock| none trace
e540a70fe0
[Firefox: 3 hits: 09-21 to 09-26]
none[none] WinXP 36 of 36 19:55:15 19:55:15 1 none none:none
none|none none none
607b60ad51
[Firefox:38 hits: 06-20 to 09-20]
none[4] WinXP 31 of 32 22:07:53 22:07:53 1 none none:none
tElock| none trace
69d773e78a
NEW
none[none] WinXP 35 of 36 13:27:59 18:54:20 2 none none:none
none|none none none