Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


03 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1868867d02
NEW
3e01fb69e1
NEW
6b997bcb17
NEW		 none[none]
none [none]
none [none]		 Win2K-f 21 of 36 05:39:05 05:39:05 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
d2548a0bf5
NEW		 none[none] WinXP 35 of 36 05:11:43 05:11:43 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
73f1082158
[Firefox:1365 hits: 06-18 to 10-02]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:15:30 21:36:26 7 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox:29 hits: 04-05 to 10-02]		 eda2056971 [0] WinXP 31 of 32 04:40:36 04:40:36 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
bea8cb1865
[Firefox:23 hits: 08-11 to 10-02]
fac78fde16
[Firefox: 6 hits: 09-13 to 09-29]		 none[none]
none [none]		 WinXP
Win2K-f		 35 of 36 05:09:02 09:46:31 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1fcc146d70
[Firefox:51 hits: 01-02 to 09-28]		 258fafe892 [0] WinXP 29 of 29 08:04:08 08:04:08 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]		 none[4] WinXP
Win2K-f		 33 of 33 00:15:30 22:18:29 23 none none:none
 tElock| none trace
0bfa79dc19
[Firefox:18 hits: 07-22 to 10-02]		 none[none] Win2K-f 31 of 33 17:00:19 17:00:19 1 none none:none
 none|none none none
1951eee0cd
[Firefox:11 hits: 06-18 to 09-28]
e5e0dbde57
[Firefox:11 hits: 06-18 to 09-28]		 1951eee0cd [1]
none [4]		 Win2K-f 31 of 33 05:10:25 05:10:25 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
cdf36e1cce
NEW		 none[none] WinXP 34 of 36 15:39:32 15:39:32 1 none none:none
 none|none none none
492957db81
[Firefox:20 hits: 01-01 to 09-29]		 064e4d7742 [0] WinXP 29 of 29 12:31:36 12:31:59 2 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
8dbc2b2f86
NEW		 none[none] WinXP 35 of 36 11:49:47 11:49:50 2 none none:none
 none|none none none
5aeb4265bf
NEW		 none[none] WinXP 34 of 36 18:34:48 18:34:48 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
b7082104e4
[Firefox:163 hits: 06-18 to 10-02]		 none[4]
none [4]		 WinXP
Win2K-f		 8 of 33 10:01:11 22:18:29 3 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
1868867d02
NEW
3e01fb69e1
NEW
6b997bcb17
NEW
c025f08a76
[Firefox: 5 hits: 09-15 to 09-29]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 10 of 36 05:39:05 05:39:05 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
7ca2287333
NEW		 none[none] WinXP 35 of 36 00:05:59 00:05:59 1 none none:none
 none|none none none
eb961a2d02
NEW		 none[none] WinXP 36 of 36 18:59:20 18:59:20 1 none none:none
 none|none none none
4bc6ee3dbb
NEW		 none[none] Win2K-f 32 of 36 04:07:24 04:07:24 1 none none:none
 none|none none none
1951eee0cd
[Firefox:11 hits: 06-18 to 09-28]		 1951eee0cd [1] Win2K-f 27 of 33 05:10:25 05:10:25 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
1868867d02
NEW		 none[none] Win2K-f 22 of 36 05:39:05 05:39:05 1 none none:none
 none|none none none
0e394ae1b6
[Firefox: 2 hits: 09-26 to 09-26]		 none[none] Win2K-f 31 of 36 21:24:55 21:24:55 1 none none:none
 none|none none none
168aab35a3
[Firefox:152 hits: 06-17 to 10-02]		 none[4] Win2K-f 31 of 33 22:50:53 22:50:53 1 none none:none
 tElock| none trace
f576060641
NEW		 none[none] WinXP 35 of 36 22:05:47 22:05:47 1 none none:none
 none|none none none
9c1f1407f9
NEW		 none[none] WinXP 25 of 36 14:49:52 14:51:58 2 none none:none
 none|none none none
475d9a7753
[Firefox: 5 hits: 06-22 to 10-01]		 none[4] WinXP 30 of 32 02:21:26 02:21:26 1 none none:none
 tElock| none trace
3060fff5c0
NEW
a7d11d75cd
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 15:32:57 15:32:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
d42c1cc7c0
[Firefox:140 hits: 01-01 to 09-30]		 af9ca5bed1 [0] WinXP 29 of 29 09:35:02 09:35:02 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
533d15b5ce
[Firefox:30 hits: 06-21 to 10-01]		 none[4] WinXP 30 of 33 02:52:21 02:52:21 1 none none:none
 tElock| none trace
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
b6cf789b7d
[Firefox: 4 hits: 07-22 to 09-22]		 none[4]
none [none]		 Win2K-f 25 of 34 17:16:47 17:16:47 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
a85b7b6e78
NEW		 none[none] WinXP 35 of 36 12:58:12 12:58:12 1 none none:none
 none|none none none
a12cab51ef
[Firefox:555 hits: 01-01 to 10-02]		 40f7f463c4 [0] WinXP 29 of 29 09:59:07 18:58:09 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
f5ab9763ea
NEW		 none[none] WinXP 35 of 36 13:27:10 13:27:12 2 none none:none
 none|none none none
03f912899b
[Firefox:149 hits: 01-08 to 10-02]		 83893bd25d [0] WinXP 32 of 32 01:39:45 15:12:00 5 none ASM:Graph
 none|none 100% lines=65 trace
2e04b06527
[Firefox:10 hits: 06-18 to 09-29]
514265be41
NEW		 none[4]
none [none]		 WinXP 2 of 36 03:18:29 03:18:29 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
168aab35a3
[Firefox:152 hits: 06-17 to 10-02]
4c3df24b32
[Firefox:207 hits: 06-17 to 10-02]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 22:50:53 22:50:53 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
741e3b03b3
[Firefox:434 hits: 01-05 to 10-02]		 e0197e8a64 [0] WinXP 31 of 32 05:53:16 16:59:01 3 none ASM:Graph
 none|none 100% lines=62 trace
b632266bbd
[Firefox: 5 hits: 09-21 to 09-29]		 none[none] WinXP 35 of 36 10:12:10 10:12:10 1 none none:none
 none|none none none
0bfa79dc19
[Firefox:18 hits: 07-22 to 10-02]
8dfb3b619f
[Firefox:19 hits: 07-22 to 10-02]		 none[none]
none [none]		 Win2K-f 29 of 34 17:00:19 17:00:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
393d3a40db
[Firefox: 6 hits: 02-14 to 08-19]		 8a0ff8065a [0] WinXP 31 of 32 14:07:54 14:07:56 2 none ASM:Graph
 PolyEnE| 0% lines=76 trace
2d6c8c447f
[Firefox: 8 hits: 09-16 to 09-30]		 none[none] WinXP 36 of 36 12:08:29 18:03:11 3 none none:none
 none|none none none
f276ec9a79
NEW		 none[none] WinXP 34 of 36 01:48:56 01:48:56 1 none none:none
 none|none none none
bea8cb1865
[Firefox:23 hits: 08-11 to 10-02]		 none[none] WinXP
Win2K-f		 32 of 36 05:09:02 09:46:31 2 none none:none
 none|none none none
831f4ee0a7
[Firefox:578 hits: 01-01 to 10-02]		 eb7546c600 [0] WinXP 29 of 29 04:11:58 05:24:56 2 none ASM:Graph
 none|none 100% lines=61 trace
58da508e93
NEW		 none[none] WinXP 34 of 36 01:07:28 01:07:28 1 none none:none
 none|none none none
533d15b5ce
[Firefox:30 hits: 06-21 to 10-01]
58c343a8d8
[Firefox:33 hits: 06-21 to 10-01]		 none[4]
58c343a8d8[1]		 WinXP 28 of 33 02:52:21 02:52:21 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
5706f2fc14
[Firefox: 2 hits: 09-14 to 09-17]
68c7a1f625
[Firefox: 2 hits: 09-14 to 09-17]
b5919931fe
[Firefox:727 hits: 06-20 to 10-02]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 01:45:04 21:05:12 8 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
57ce4acac2
[Firefox:223 hits: 06-17 to 10-02]		 none[4]
57ce4acac2[1]		 Win2K-f 0 of 33 10:51:37 16:46:07 3 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
8b3bea4baf
NEW		 none[none] WinXP 35 of 36 03:05:48 03:05:49 2 none none:none
 none|none none none
269540d8b6
NEW		 none[none] Win2K-f 33 of 36 18:58:47 18:58:47 1 none none:none
 none|none none none
40870345c3
[Firefox: 6 hits: 09-22 to 10-02]		 none[none] Win2K-f 0 of 0 14:34:31 14:34:31 1 none none:none
 none|none none none
4ca3056804
[Firefox: 5 hits: 06-18 to 09-30]		 4ca3056804 [1] Win2K-f 1 of 33 00:54:50 00:54:50 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
a08f3b74a4
[Firefox:966 hits: 06-18 to 10-02]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:49:46 21:53:31 8 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2bf8f809de
NEW		 none[none] WinXP 35 of 36 01:16:34 01:16:34 1 none none:none
 none|none none none
58da508e93
NEW
b6e3df9fe9
NEW		 none[none]
none [none]		 WinXP 31 of 36 01:07:28 01:07:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b872c76081
[Firefox:36 hits: 09-13 to 10-02]		 none[none] WinXP 36 of 36 03:21:34 12:02:43 3 none none:none
 none|none none none
b82d9bcbfc
[Firefox: 3 hits: 04-08 to 09-26]		 076c58f365 [0] WinXP 27 of 31 06:40:45 06:40:45 1 none ASM:Graph
 ASPack| 54% lines=294
embedded dns		 trace
e4157a2cc3
[Firefox: 6 hits: 08-23 to 09-12]		 none[none] WinXP 36 of 36 04:48:25 04:48:25 1 none none:none
 none|none none none
5706f2fc14
[Firefox: 2 hits: 09-14 to 09-17]
68c7a1f625
[Firefox: 2 hits: 09-14 to 09-17]		 none[none]
none [none]		 Win2K-f 35 of 36 21:05:12 21:05:12 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0139d7ad8
[Firefox:131 hits: 01-03 to 10-02]		 d9e9662db1 [0] WinXP 29 of 29 02:13:41 02:13:41 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
0e394ae1b6
[Firefox: 2 hits: 09-26 to 09-26]
9365593ebb
[Firefox: 2 hits: 09-26 to 09-26]		 none[none]
none [none]		 Win2K-f 33 of 36 21:24:55 21:24:55 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9bd024b012
NEW		 none[none] WinXP 35 of 36 13:21:15 13:21:15 1 none none:none
 none|none none none
7dc200670b
NEW		 none[none] WinXP 27 of 36 01:15:48 01:15:48 1 none none:none
 none|none none none
2e9f4c97cc
[Firefox: 2 hits: 09-24 to 09-30]		 none[none] WinXP 34 of 36 09:02:59 09:03:41 2 none none:none
 none|none none none
607b60ad51
[Firefox:39 hits: 06-20 to 09-28]
e5c7bce70e
[Firefox:38 hits: 06-20 to 09-28]		 none[4]
e5c7bce70e[1]		 WinXP 2 of 32 11:24:48 11:24:48 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
d175bad0e6
[Firefox: 6 hits: 04-05 to 08-27]		 dfb15f5463 [0] WinXP 29 of 29 13:08:14 13:08:14 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
40870345c3
[Firefox: 6 hits: 09-22 to 10-02]
6c539a9f23
[Firefox: 6 hits: 09-22 to 10-02]		 none[none]
none [none]		 Win2K-f 0 of 0 14:34:31 14:34:31 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
911b634a4d
NEW		 none[none] WinXP 0 of 36 09:59:07 09:59:07 1 none none:none
 none|none none none
7ca2287333
NEW
95ccd6eb89
NEW		 none[none]
none [none]		 WinXP 32 of 36 00:05:59 00:05:59 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2745 hits: 06-17 to 10-02]
b7082104e4
[Firefox:163 hits: 06-18 to 10-02]
e07c29c4ae
[Firefox:551 hits: 06-19 to 10-02]		 none[4]
none [4]
e07c29c4ae[1]		 WinXP 0 of 33 00:05:59 22:18:29 5 none none:none
none:none
ASM:Graph
 tElock|
tElock|
FSG|		 48% none
none
lines=92		 trace
trace
trace
ca47a36342
[Firefox:11 hits: 02-16 to 10-02]		 c3a58f69c6 [0] WinXP 26 of 28 03:50:48 03:50:48 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
0b951c2832
[Firefox: 2 hits: 08-19 to 09-23]		 none[none] WinXP 32 of 36 02:50:53 02:50:53 1 none none:none
 none|none none none
6e2eaa0359
[Firefox:11 hits: 07-10 to 09-26]
740e3bffe0
[Firefox:12 hits: 06-25 to 09-26]		 none[none]
none [none]		 WinXP 24 of 33 07:35:28 07:35:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
364cb81fee
NEW		 none[none] WinXP 25 of 36 06:53:27 06:53:27 1 none none:none
 none|none none none
269540d8b6
NEW
9b272b04ec
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 18:58:47 18:58:47 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
31dbe08df8
NEW		 none[none] Win2K-f 35 of 36 03:15:28 03:15:28 1 none none:none
 none|none none none
7f60162c2c
[Firefox:663 hits: 12-31 to 10-02]		 1aad8e4632 [0] WinXP 25 of 25 04:42:51 12:37:48 6 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
57ce4acac2
[Firefox:223 hits: 06-17 to 10-02]
83f26f5044
[Firefox:23 hits: 06-20 to 09-30]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 10:51:37 10:51:37 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
6e2eaa0359
[Firefox:11 hits: 07-10 to 09-26]		 none[none] WinXP 31 of 33 07:35:28 07:35:28 1 none none:none
 none|none none none
1868867d02
NEW
3e01fb69e1
NEW
6b997bcb17
NEW
c025f08a76
[Firefox: 5 hits: 09-15 to 09-29]
d184a8ac3c
NEW		 none[none]
none [none]
none [none]
none [none]
none [none]		 Win2K-f 26 of 36 05:39:05 05:39:05 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
632e315db2
NEW		 none[none] WinXP 35 of 36 16:23:12 16:23:12 1 none none:none
 none|none none none
ea096a2bdf
[Firefox:18 hits: 07-12 to 09-30]		 none[none] WinXP 31 of 32 14:02:13 14:02:13 1 none none:none
 none|none none none
71b183b0c8
[Firefox:10 hits: 09-17 to 10-01]		 none[none] WinXP 36 of 36 07:40:38 12:41:46 2 none none:none
 none|none none none
e52b187d6d
NEW		 none[none] Win2K-f 4 of 36 20:25:58 20:25:58 1 none none:none
 none|none none none
f9d832dfd2
NEW		 none[none] WinXP 0 of 0 03:16:59 03:16:59 1 none none:none
 none|none none none
f3aadc574a
NEW		 none[none] WinXP 35 of 36 19:42:03 19:42:03 1 none none:none
 none|none none none
31dbe08df8
NEW
78a1dce44a
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 03:15:28 03:15:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1227 hits: 12-31 to 10-02]		 7a70e1b592 [0] WinXP 26 of 28 00:11:15 17:08:59 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
eda98e1cd6
NEW		 none[none] WinXP 35 of 36 05:41:33 05:47:56 2 none none:none
 none|none none none
ab5e47bf8d
[Firefox:43 hits: 01-02 to 10-02]		 none[3] WinXP 29 of 29 08:11:35 08:11:35 1 none none:none
 ASPack| none trace
40e14e3ac3
NEW		 none[none] WinXP 0 of 36 10:19:59 10:19:59 1 none none:none
 none|none none none
3f61da26e7
NEW		 none[none] WinXP 35 of 36 14:34:18 14:34:18 1 none none:none
 none|none none none
c9d01112a8
[Firefox:11 hits: 08-06 to 09-18]		 none[none] WinXP 35 of 36 09:43:16 09:43:16 1 none none:none
 none|none none none
2e04b06527
[Firefox:10 hits: 06-18 to 09-29]		 none[4] WinXP 30 of 33 03:18:29 03:18:29 1 none none:none
 tElock| none trace
3060fff5c0
NEW		 none[none] Win2K-f 30 of 34 15:32:57 15:32:57 1 none none:none
 none|none none none
607b60ad51
[Firefox:39 hits: 06-20 to 09-28]		 none[4] WinXP 31 of 32 11:24:48 11:24:48 1 none none:none
 tElock| none trace
e98a5fa83f
NEW		 none[none] WinXP 36 of 36 13:13:25 13:13:25 1 none none:none
 none|none none none
0b951c2832
[Firefox: 2 hits: 08-19 to 09-23]
e4ed4df0f0
[Firefox: 2 hits: 08-19 to 09-23]		 none[none]
none [none]		 WinXP 34 of 36 02:50:53 02:50:53 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5706f2fc14
[Firefox: 2 hits: 09-14 to 09-17]		 none[none] Win2K-f 33 of 36 21:05:12 21:05:12 1 none none:none
 none|none none none
475d9a7753
[Firefox: 5 hits: 06-22 to 10-01]
e07c29c4ae
[Firefox:551 hits: 06-19 to 10-02]
e9a7fa27d5
[Firefox: 5 hits: 06-22 to 10-01]		 none[4]
e07c29c4ae[1]
e9a7fa27d5[1]		 WinXP 30 of 32 02:21:26 02:21:26 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
FSG|
Armadillo|		 47% none
lines=92
lines=82		 trace
trace
trace
1868867d02
NEW
3e01fb69e1
NEW		 none[none]
none [none]		 Win2K-f 21 of 36 05:39:05 05:39:05 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none