Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


01 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
b5919931fe
[Firefox:700 hits: 06-20 to 09-30]
eb9217b966
NEW
ff2150aa95
[Firefox: 3 hits: 07-03 to 08-22]		 b5919931fe [1]
none [none]
none [none]		 Win2K-f 30 of 33 21:15:25 21:15:25 1 none ASM:Graph
none:none
none:none
 ASProtect|
none|none
none|none		 lines=90
none
none		 trace
none
none
79fdac8c50
NEW		 none[none] WinXP 34 of 36 09:25:50 09:25:52 2 none none:none
 none|none none none
b5919931fe
[Firefox:700 hits: 06-20 to 09-30]
da00a8e7a1
[Firefox:22 hits: 08-05 to 09-28]
f685f8e027
[Firefox:26 hits: 06-18 to 09-28]		 b5919931fe [1]
none [none]
f685f8e027[1]		 Win2K-f 28 of 33 16:00:37 16:00:37 1 none ASM:Graph
none:none
ASM:Graph
 ASProtect|
none|none
Armadillo|		 48% lines=90
none
lines=82		 trace
none
trace
53bfe15e91
[Firefox:2672 hits: 06-17 to 09-30]
73f1082158
[Firefox:1329 hits: 06-18 to 09-30]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 01:38:35 23:44:59 19 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox:26 hits: 04-05 to 09-30]		 eda2056971 [0] WinXP 31 of 32 07:50:25 14:55:37 2 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
378a4bac36
[Firefox: 8 hits: 07-01 to 08-17]
d11b4c2e19
[Firefox: 8 hits: 07-01 to 08-17]		 none[none]
none [none]		 WinXP 29 of 33 03:22:24 03:22:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2672 hits: 06-17 to 09-30]		 none[4] WinXP
Win2K-f		 33 of 33 00:38:18 23:44:59 29 none none:none
 tElock| none trace
0bfa79dc19
[Firefox:16 hits: 07-22 to 09-29]		 none[none] Win2K-f 31 of 33 11:25:39 11:25:39 1 none none:none
 none|none none none
557fac1fa8
NEW		 none[none] WinXP 34 of 36 09:04:47 09:04:47 1 none none:none
 none|none none none
0115338c8b
[Firefox: 6 hits: 09-12 to 09-29]		 none[none] Win2K-f
WinXP		 33 of 36 07:42:28 18:30:39 3 none none:none
 none|none none none
91990df207
NEW
b737716fed
NEW		 none[none]
none [none]		 WinXP 33 of 36 10:35:35 10:35:35 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
623e0b5433
[Firefox: 9 hits: 09-14 to 09-19]		 none[none] WinXP 34 of 36 10:30:17 10:30:42 2 none none:none
 none|none none none
4ab2ecbc0f
[Firefox: 7 hits: 06-29 to 08-19]
65eb2e3aee
[Firefox: 7 hits: 06-29 to 08-19]		 none[none]
none [none]		 Win2K-f 31 of 33 06:21:14 06:21:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2672 hits: 06-17 to 09-30]
b7082104e4
[Firefox:159 hits: 06-18 to 09-30]		 none[4]
none [4]		 Win2K-f 8 of 33 05:40:27 09:32:42 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
7f89b38665
[Firefox:18 hits: 08-02 to 09-30]		 none[none] Win2K-f 32 of 36 02:45:10 02:45:10 1 none none:none
 none|none none none
d28bf8aa1a
[Firefox: 7 hits: 09-12 to 09-22]		 none[none] WinXP 36 of 36 10:20:25 10:20:25 1 none none:none
 none|none none none
2e7969c422
NEW		 none[none] WinXP 31 of 36 21:27:17 21:27:17 1 none none:none
 none|none none none
b8d9d28ce7
NEW		 none[none] WinXP 35 of 36 20:16:28 20:16:51 2 none none:none
 none|none none none
168aab35a3
[Firefox:148 hits: 06-17 to 09-29]		 none[4] WinXP
Win2K-f		 31 of 33 00:57:35 02:27:53 2 none none:none
 tElock| none trace
0c390db94d
NEW		 none[none] WinXP 34 of 36 22:18:33 22:18:33 1 none none:none
 none|none none none
73ce2b74da
[Firefox:19 hits: 06-18 to 09-30]		 73ce2b74da [1] Win2K-f 3 of 33 14:48:53 14:48:53 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
475d9a7753
[Firefox: 4 hits: 06-22 to 09-24]		 none[4] WinXP 30 of 32 13:19:00 13:19:00 1 none none:none
 tElock| none trace
533d15b5ce
[Firefox:29 hits: 06-21 to 09-29]		 none[4] Win2K-f 30 of 33 13:43:51 13:43:51 1 none none:none
 tElock| none trace
bca9e0fb5f
[Firefox:31 hits: 06-18 to 09-29]		 none[4] WinXP
Win2K-f		 31 of 32 09:40:12 09:54:51 2 none none:none
 PolyEnE| none trace
a12cab51ef
[Firefox:550 hits: 01-01 to 09-30]		 40f7f463c4 [0] WinXP 29 of 29 11:37:42 19:56:20 4 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
d99da8735e
[Firefox: 5 hits: 09-18 to 09-23]		 none[none] WinXP 34 of 36 10:44:08 10:44:08 1 none none:none
 none|none none none
fee215afd0
[Firefox: 2 hits: 09-26 to 09-29]		 none[none] WinXP 33 of 35 04:49:06 04:49:06 1 none none:none
 none|none none none
e63559344d
NEW		 none[none] WinXP 33 of 36 13:52:24 13:52:24 1 none none:none
 none|none none none
168aab35a3
[Firefox:148 hits: 06-17 to 09-29]
4c3df24b32
[Firefox:205 hits: 06-17 to 09-30]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 02:27:53 02:27:53 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
686d4ca67b
[Firefox: 8 hits: 07-08 to 09-30]
b7e379b157
[Firefox: 8 hits: 07-08 to 09-30]		 none[none]
none [none]		 Win2K-f 29 of 33 03:53:56 03:53:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
741e3b03b3
[Firefox:419 hits: 01-05 to 09-30]		 e0197e8a64 [0] WinXP 31 of 32 05:24:30 23:43:16 6 none ASM:Graph
 none|none 100% lines=62 trace
0bfa79dc19
[Firefox:16 hits: 07-22 to 09-29]
8dfb3b619f
[Firefox:17 hits: 07-22 to 09-29]		 none[none]
none [none]		 Win2K-f 29 of 34 11:25:39 11:25:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:148 hits: 06-17 to 09-29]
bba5ec5f4d
[Firefox: 3 hits: 09-22 to 09-29]		 none[4]
none [none]		 WinXP 0 of 0 00:57:35 00:57:35 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
831f4ee0a7
[Firefox:573 hits: 01-01 to 09-30]		 eb7546c600 [0] WinXP 29 of 29 03:04:55 23:48:51 3 none ASM:Graph
 none|none 100% lines=61 trace
533d15b5ce
[Firefox:29 hits: 06-21 to 09-29]
58c343a8d8
[Firefox:32 hits: 06-21 to 09-29]		 none[4]
58c343a8d8[1]		 Win2K-f 28 of 33 13:43:51 13:43:51 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
778cdbeb40
NEW		 none[none] WinXP 34 of 36 02:36:15 02:47:13 2 none none:none
 none|none none none
dfdc4b62b3
NEW		 none[none] WinXP 35 of 36 06:56:17 06:56:17 1 none none:none
 none|none none none
b5919931fe
[Firefox:700 hits: 06-20 to 09-30]		 b5919931fe [1] Win2K-f 0 of 32 02:41:47 21:15:25 13 none ASM:Graph
 ASProtect| 48% lines=90 trace
0115338c8b
[Firefox: 6 hits: 09-12 to 09-29]
321f4fc27d
[Firefox: 6 hits: 09-12 to 09-29]		 none[none]
none [none]		 Win2K-f
WinXP		 31 of 36 07:42:28 18:30:39 3 none none:none
none:none
 none|none
none|none		 none
none		 none
none
61c9be2a00
[Firefox: 3 hits: 01-27 to 02-29]		 1931062d39 [0] WinXP 28 of 29 11:49:11 11:49:11 1 none ASM:Graph
 PolyEnE| 99% lines=111
embedded dns		 trace
4ab2ecbc0f
[Firefox: 7 hits: 06-29 to 08-19]		 none[none] Win2K-f 31 of 33 06:21:14 06:21:14 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2672 hits: 06-17 to 09-30]
57ce4acac2
[Firefox:221 hits: 06-17 to 09-30]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 18:49:41 18:49:41 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
40870345c3
[Firefox: 4 hits: 09-22 to 09-30]		 none[none] Win2K-f 0 of 0 10:09:50 10:09:50 1 none none:none
 none|none none none
af79e0c602
[Firefox: 8 hits: 01-08 to 09-18]		 none[4] WinXP 29 of 30 03:07:33 03:07:33 1 none none:none
 ASPack| none trace
1a2c0e6130
[Firefox:441 hits: 12-31 to 09-30]		 048df78048 [0] WinXP 29 of 29 10:04:45 21:00:04 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2672 hits: 06-17 to 09-30]
a08f3b74a4
[Firefox:936 hits: 06-18 to 09-30]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 03:14:11 22:40:32 8 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
91990df207
NEW		 none[none] WinXP 35 of 36 10:35:35 10:35:35 1 none none:none
 none|none none none
7f89b38665
[Firefox:18 hits: 08-02 to 09-30]
a51a50404e
[Firefox:18 hits: 08-02 to 09-30]		 none[none]
none [none]		 Win2K-f 34 of 36 02:45:10 02:45:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4575d9d4f6
NEW		 none[none] WinXP 33 of 36 00:38:18 11:44:53 2 none none:none
 none|none none none
44163e3b88
NEW		 none[none] WinXP 35 of 36 04:11:57 04:11:57 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:128 hits: 01-03 to 09-30]		 d9e9662db1 [0] WinXP 29 of 29 14:37:03 18:20:10 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
12e484a198
NEW		 none[none] Win2K-f 32 of 36 12:21:40 20:57:12 2 none none:none
 none|none none none
e8161390e4
NEW		 none[none] WinXP 33 of 36 13:16:29 13:16:29 1 none none:none
 none|none none none
686d4ca67b
[Firefox: 8 hits: 07-08 to 09-30]		 none[none] Win2K-f 32 of 33 03:53:56 03:53:56 1 none none:none
 none|none none none
e61928f16c
NEW		 none[none] WinXP 34 of 36 16:06:40 16:06:40 1 none none:none
 none|none none none
2e7969c422
NEW
9063722e22
NEW		 none[none]
none [none]		 WinXP 33 of 36 21:27:17 21:27:17 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0d3fafbf29
[Firefox: 5 hits: 06-21 to 09-30]
d401773a07
[Firefox: 5 hits: 06-21 to 09-30]		 0d3fafbf29 [1]
none [4]		 Win2K-f 29 of 33 00:14:11 00:14:11 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
0d3fafbf29
[Firefox: 5 hits: 06-21 to 09-30]		 0d3fafbf29 [1] Win2K-f 28 of 33 00:14:11 00:14:11 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
16874933ea
[Firefox:47 hits: 06-18 to 09-29]
76ee340669
[Firefox:47 hits: 06-18 to 09-29]		 16874933ea [1]
none [4]		 Win2K-f 33 of 33 00:20:52 00:20:52 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
4b2541d5f7
[Firefox:13 hits: 08-19 to 09-30]		 none[none] WinXP 35 of 36 04:18:36 04:18:36 1 none none:none
 none|none none none
cc263a661d
[Firefox: 8 hits: 09-24 to 09-28]		 none[none] WinXP 36 of 36 15:28:26 15:28:26 1 none none:none
 none|none none none
3373948767
[Firefox:27 hits: 07-03 to 09-30]
c73f738c30
[Firefox:27 hits: 07-03 to 09-30]		 none[none]
none [none]		 Win2K-f 29 of 33 04:04:16 04:04:16 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
40870345c3
[Firefox: 4 hits: 09-22 to 09-30]
6c539a9f23
[Firefox: 4 hits: 09-22 to 09-30]		 none[none]
none [none]		 Win2K-f 0 of 0 10:09:50 10:09:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
df17a625ee
[Firefox:260 hits: 01-01 to 09-30]		 9bbdd086c5 [0] WinXP 29 of 29 20:35:44 20:35:44 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
986b59708d
[Firefox:88 hits: 01-14 to 09-29]		 8a00217866 [0] WinXP 29 of 29 02:59:27 16:45:51 2 none ASM:Graph
 PolyEnE| 100% lines=57 trace
1f59c01aef
[Firefox: 9 hits: 08-01 to 09-22]		 none[none] Win2K-f 34 of 36 14:49:43 14:49:43 1 none none:none
 none|none none none
12e484a198
NEW
2e43dc0077
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 12:21:40 20:57:12 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f677e0c423
NEW		 none[none] WinXP 33 of 36 14:15:33 14:15:33 1 none none:none
 none|none none none
1f59c01aef
[Firefox: 9 hits: 08-01 to 09-22]
dc92683d9a
[Firefox:16 hits: 06-19 to 09-22]		 none[none]
dc92683d9a[1]		 Win2K-f 29 of 33 14:49:43 14:49:43 1 none none:none
ASM:Graph
 none|none
Armadillo|		 47% none
lines=82		 none
trace
16874933ea
[Firefox:47 hits: 06-18 to 09-29]		 16874933ea [1] Win2K-f 29 of 33 00:20:52 00:20:52 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
bca9e0fb5f
[Firefox:31 hits: 06-18 to 09-29]
e53a9ea82e
[Firefox:31 hits: 06-18 to 09-29]		 none[4]
e53a9ea82e[1]		 WinXP
Win2K-f		 23 of 33 09:40:12 09:54:51 2 none none:none
ASM:Graph
 PolyEnE|
Armadillo|		 47% none
lines=81		 trace
trace
c61ba7b6b9
[Firefox: 2 hits: 01-26 to 01-26]		 none[none] WinXP 30 of 32 16:56:18 16:56:43 2 none none:none
 none|none none none
382279b44f
[Firefox:263 hits: 05-22 to 09-30]		 049e62d55b [0] WinXP
Win2K-f		 19 of 32 04:48:53 13:47:54 9 none ASM:Graph
 Armadillo| 50% lines=192 trace
2e7969c422
NEW
9063722e22
NEW
e07c29c4ae
[Firefox:535 hits: 06-19 to 09-30]		 none[none]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 13:19:00 21:27:17 3 none none:none
none:none
ASM:Graph
 none|none
none|none
FSG|		 48% none
none
lines=92		 none
none
trace
1d7b35b012
NEW		 none[none] WinXP 35 of 36 07:36:15 07:36:15 1 none none:none
 none|none none none
30d50bdc3d
[Firefox: 7 hits: 09-12 to 09-29]		 none[none] Win2K-f 33 of 36 12:41:52 12:41:52 1 none none:none
 none|none none none
15d4d85dc0
[Firefox:11 hits: 06-10 to 08-26]		 none[4] Win2K-f 32 of 32 01:24:52 01:24:52 1 none none:none
 StarForce| none trace
e8cc9c1f8b
NEW		 none[none] WinXP 34 of 35 14:12:17 14:12:17 1 none none:none
 none|none none none
2322158770
NEW		 none[none] WinXP 35 of 36 14:09:45 14:09:45 1 none none:none
 none|none none none
378a4bac36
[Firefox: 8 hits: 07-01 to 08-17]		 none[none] WinXP 30 of 33 03:22:24 03:22:24 1 none none:none
 none|none none none
4575d9d4f6
NEW
ed570a2e4d
NEW		 none[none]
none [none]		 WinXP 35 of 36 11:44:53 11:44:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:654 hits: 12-31 to 09-30]		 1aad8e4632 [0] WinXP 25 of 25 05:51:15 20:05:45 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
321052074e
[Firefox:14 hits: 02-23 to 09-29]		 1a587de3ca [0] WinXP 31 of 32 15:12:55 15:12:55 1 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
71b183b0c8
[Firefox: 9 hits: 09-17 to 09-29]		 none[none] WinXP 36 of 36 11:13:27 11:13:27 1 none none:none
 none|none none none
3373948767
[Firefox:27 hits: 07-03 to 09-30]		 none[none] Win2K-f 30 of 33 04:04:16 04:04:16 1 none none:none
 none|none none none
24e607bccb
NEW		 none[none] WinXP 35 of 36 09:00:50 09:00:50 1 none none:none
 none|none none none
f3aadc574a
NEW		 none[none] WinXP 35 of 36 18:55:29 18:55:29 1 none none:none
 none|none none none
b5919931fe
[Firefox:700 hits: 06-20 to 09-30]
da00a8e7a1
[Firefox:22 hits: 08-05 to 09-28]		 b5919931fe [1]
none [none]		 Win2K-f 34 of 36 16:00:37 16:00:37 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
73ce2b74da
[Firefox:19 hits: 06-18 to 09-30]
79c01ec060
[Firefox:49 hits: 06-18 to 09-30]		 73ce2b74da [1]
none [4]		 Win2K-f 33 of 33 14:48:53 14:48:53 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7d99b0e910
[Firefox:1209 hits: 12-31 to 09-30]		 7a70e1b592 [0] WinXP 26 of 28 08:25:59 22:16:32 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
264d107aeb
NEW		 none[none] WinXP 33 of 36 08:02:40 08:02:40 1 none none:none
 none|none none none
7e8bfa9b49
NEW		 none[none] WinXP 35 of 36 12:12:55 12:12:55 1 none none:none
 none|none none none
ab5e47bf8d
[Firefox:41 hits: 01-02 to 09-25]		 none[3] WinXP 29 of 29 13:41:54 13:41:54 1 none none:none
 ASPack| none trace
e540a70fe0
[Firefox: 5 hits: 09-21 to 09-29]		 none[none] WinXP 36 of 36 19:08:09 19:08:09 1 none none:none
 none|none none none
b5919931fe
[Firefox:700 hits: 06-20 to 09-30]
eb9217b966
NEW		 b5919931fe [1]
none [none]		 Win2K-f 34 of 36 21:15:25 21:15:25 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
475d9a7753
[Firefox: 4 hits: 06-22 to 09-24]
e07c29c4ae
[Firefox:535 hits: 06-19 to 09-30]
e9a7fa27d5
[Firefox: 4 hits: 06-22 to 09-24]		 none[4]
e07c29c4ae[1]
e9a7fa27d5[1]		 WinXP 30 of 32 13:19:00 13:19:00 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
FSG|
Armadillo|		 47% none
lines=92
lines=82		 trace
trace
trace
6b1c6d0395
[Firefox: 3 hits: 09-18 to 09-27]		 none[none] WinXP 34 of 36 22:30:27 22:30:50 2 none none:none
 none|none none none