Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


04 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
1868867d02
[Firefox: 2 hits: 09-29 to 10-03]
3e01fb69e1
[Firefox: 2 hits: 09-29 to 10-03]
6b997bcb17
[Firefox: 2 hits: 09-29 to 10-03]		 none[none]
none [none]
none [none]		 WinXP 21 of 36 17:50:10 17:50:10 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]
73f1082158
[Firefox:1372 hits: 06-18 to 10-03]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:48:00 22:35:43 22 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
22999be88c
[Firefox:30 hits: 04-05 to 10-03]		 eda2056971 [0] WinXP 31 of 32 17:10:35 17:10:35 1 none ASM:Graph
 PolyEnE| 100% lines=154
embedded dns		 trace
12003cc8c8
NEW		 none[none] WinXP 34 of 36 21:08:16 21:08:16 1 none none:none
 none|none none none
e90f8b883b
[Firefox: 3 hits: 09-22 to 09-27]		 none[none] WinXP 0 of 0 08:43:15 08:43:15 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]		 none[4] WinXP
Win2K-f		 33 of 33 00:25:06 23:47:05 51 none none:none
 tElock| none trace
1951eee0cd
[Firefox:12 hits: 06-18 to 10-03]
e5e0dbde57
[Firefox:12 hits: 06-18 to 10-03]		 1951eee0cd [1]
none [4]		 Win2K-f 31 of 33 18:02:05 18:02:05 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=82
none		 trace
trace
87e1117f2a
[Firefox:10 hits: 07-18 to 09-30]		 none[none] Win2K-f 32 of 33 07:26:24 07:26:24 1 none none:none
 none|none none none
623e0b5433
[Firefox:11 hits: 09-14 to 10-01]		 none[none] WinXP 34 of 36 20:49:30 20:49:30 1 none none:none
 none|none none none
bb7681eca8
NEW		 none[none] WinXP 32 of 32 07:38:49 07:38:49 1 none none:none
 none|none none none
1868867d02
[Firefox: 2 hits: 09-29 to 10-03]
3e01fb69e1
[Firefox: 2 hits: 09-29 to 10-03]
6b997bcb17
[Firefox: 2 hits: 09-29 to 10-03]
6ee401581b
NEW
c025f08a76
[Firefox: 6 hits: 09-15 to 10-03]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP 10 of 36 17:50:10 17:50:10 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
7f89b38665
[Firefox:20 hits: 08-02 to 10-02]		 none[none] Win2K-f 32 of 36 10:47:18 10:47:18 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]
b7082104e4
[Firefox:166 hits: 06-18 to 10-03]		 none[4]
none [4]		 WinXP
Win2K-f		 8 of 33 06:05:40 22:21:10 8 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
0e75ae41b0
NEW		 none[none] WinXP 34 of 36 03:42:12 03:42:12 1 none none:none
 none|none none none
6672dcb81a
NEW		 none[none] WinXP 36 of 36 20:52:00 20:52:00 1 none none:none
 none|none none none
8ef9e03ad3
[Firefox: 4 hits: 09-12 to 09-28]		 none[none] WinXP 34 of 36 11:24:03 11:24:03 1 none none:none
 none|none none none
214bc429e1
[Firefox: 2 hits: 09-25 to 09-26]		 none[none] Win2K-f 34 of 36 02:21:57 03:57:47 2 none none:none
 none|none none none
c736218316
NEW		 none[none] WinXP 36 of 36 18:44:58 18:45:07 2 none none:none
 none|none none none
1951eee0cd
[Firefox:12 hits: 06-18 to 10-03]		 1951eee0cd [1] Win2K-f 27 of 33 18:02:05 18:02:05 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
1868867d02
[Firefox: 2 hits: 09-29 to 10-03]		 none[none] WinXP 22 of 36 17:50:10 17:50:10 1 none none:none
 none|none none none
dae793fa4a
NEW		 none[none] Win2K-f 34 of 36 04:51:14 04:51:14 1 none none:none
 none|none none none
1868867d02
[Firefox: 2 hits: 09-29 to 10-03]
3e01fb69e1
[Firefox: 2 hits: 09-29 to 10-03]
6b997bcb17
[Firefox: 2 hits: 09-29 to 10-03]
6ee401581b
NEW		 none[none]
none [none]
none [none]
none [none]		 WinXP 33 of 36 17:50:10 17:50:10 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
168aab35a3
[Firefox:153 hits: 06-17 to 10-03]		 none[4] Win2K-f 31 of 33 00:29:17 18:19:29 2 none none:none
 tElock| none trace
9d77b4ca8e
[Firefox: 2 hits: 06-29 to 07-12]		 none[none] WinXP 30 of 33 15:49:17 15:49:17 1 none none:none
 none|none none none
9c1f1407f9
[Firefox: 3 hits: 09-30 to 10-03]		 none[none] WinXP 25 of 36 18:39:36 18:39:36 1 none none:none
 none|none none none
a12cab51ef
[Firefox:558 hits: 01-01 to 10-03]		 40f7f463c4 [0] WinXP 29 of 29 09:42:45 11:58:47 3 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
e90f8b883b
[Firefox: 3 hits: 09-22 to 09-27]
f0e937602b
[Firefox: 3 hits: 09-22 to 09-27]		 none[none]
none [none]		 WinXP 0 of 0 08:43:15 08:43:15 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2e04b06527
[Firefox:11 hits: 06-18 to 10-03]
514265be41
[Firefox: 2 hits: 09-24 to 10-03]		 none[4]
none [none]		 Win2K-f 2 of 36 02:32:48 02:32:48 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
4c3df24b32
[Firefox:208 hits: 06-17 to 10-03]		 4c3df24b32 [1] Win2K-f
WinXP		 0 of 33 00:29:17 22:18:12 5 none ASM:Graph
 Armadillo| 47% lines=81 trace
5041f56276
NEW		 none[none] Win2K-f 36 of 36 07:28:42 07:28:42 1 none none:none
 none|none none none
741e3b03b3
[Firefox:437 hits: 01-05 to 10-03]		 e0197e8a64 [0] WinXP 31 of 32 03:51:20 12:41:59 5 none ASM:Graph
 none|none 100% lines=62 trace
393d3a40db
[Firefox: 8 hits: 02-14 to 10-03]		 8a0ff8065a [0] WinXP 31 of 32 22:25:52 22:25:52 1 none ASM:Graph
 PolyEnE| 0% lines=76 trace
831f4ee0a7
[Firefox:580 hits: 01-01 to 10-03]		 eb7546c600 [0] WinXP 29 of 29 05:20:47 20:48:32 2 none ASM:Graph
 none|none 100% lines=61 trace
05b1ed9c9c
NEW
0c87a74ebe
NEW		 none[none]
none [none]		 Win2K-f 0 of 0 22:44:03 22:44:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
05b1ed9c9c
NEW
0c87a74ebe
NEW
b5919931fe
[Firefox:735 hits: 06-20 to 10-03]		 none[none]
none [none]
b5919931fe[1]		 Win2K-f 0 of 32 00:29:17 22:44:03 14 none none:none
none:none
ASM:Graph
 none|none
none|none
ASProtect|		 48% none
none
lines=90		 none
none
trace
15ee4e7627
NEW		 none[none] WinXP 35 of 36 06:28:37 06:28:37 1 none none:none
 none|none none none
57ce4acac2
[Firefox:226 hits: 06-17 to 10-03]		 57ce4acac2 [1] WinXP
Win2K-f		 0 of 33 00:25:06 13:24:28 7 none ASM:Graph
 Armadillo| 47% lines=81 trace
1a88bd5450
NEW		 none[none] WinXP 32 of 36 07:16:20 07:16:20 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:446 hits: 12-31 to 10-02]		 048df78048 [0] WinXP 29 of 29 09:52:38 21:53:33 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]
a08f3b74a4
[Firefox:974 hits: 06-18 to 10-03]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 04:46:28 23:47:05 15 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
[Firefox:39 hits: 09-13 to 10-03]		 none[none] WinXP 36 of 36 01:50:59 22:36:02 4 none none:none
 none|none none none
a08f3b74a4
[Firefox:974 hits: 06-18 to 10-03]
ddd2a2b264
[Firefox: 3 hits: 06-17 to 08-23]		 a08f3b74a4 [1]
none [4]		 WinXP 31 of 33 15:06:37 15:06:37 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f89b38665
[Firefox:20 hits: 08-02 to 10-02]
a51a50404e
[Firefox:20 hits: 08-02 to 10-02]		 none[none]
none [none]		 Win2K-f 34 of 36 10:47:18 10:47:18 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
ddfb108f62
[Firefox: 2 hits: 02-16 to 02-25]		 b2cfa85049 [0] WinXP 28 of 28 10:27:24 10:27:39 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
7c42ab929f
NEW		 none[none] WinXP 35 of 36 08:02:15 08:02:15 1 none none:none
 none|none none none
09c3d90250
[Firefox:10 hits: 08-04 to 09-26]
8f34a39070
[Firefox:10 hits: 08-04 to 09-26]		 none[none]
none [none]		 WinXP 34 of 36 06:58:30 06:58:30 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
5706f2fc14
[Firefox: 3 hits: 09-14 to 10-03]
68c7a1f625
[Firefox: 3 hits: 09-14 to 10-03]		 none[none]
none [none]		 Win2K-f 35 of 36 19:01:46 19:01:46 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0139d7ad8
[Firefox:132 hits: 01-03 to 10-03]		 d9e9662db1 [0] WinXP 29 of 29 09:02:35 14:18:36 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
87e1117f2a
[Firefox:10 hits: 07-18 to 09-30]
b4fe4581c3
[Firefox:10 hits: 07-18 to 09-30]		 none[none]
none [none]		 Win2K-f 29 of 33 07:26:24 07:26:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
12e484a198
[Firefox: 3 hits: 10-01 to 10-02]		 none[none] WinXP 32 of 36 22:45:21 22:45:21 1 none none:none
 none|none none none
97a3feb53f
[Firefox: 3 hits: 09-18 to 09-26]		 none[none] WinXP 35 of 36 13:42:48 13:42:48 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]
a08f3b74a4
[Firefox:974 hits: 06-18 to 10-03]
e03407db94
NEW		 none[4]
a08f3b74a4[1]
none [none]		 WinXP 0 of 36 23:47:05 23:47:05 1 none none:none
ASM:Graph
none:none
 tElock|
Armadillo|
none|none		 none
lines=81
none		 trace
trace
none
659ac922d6
NEW		 none[none] WinXP 35 of 36 17:20:06 17:20:06 1 none none:none
 none|none none none
168aab35a3
[Firefox:153 hits: 06-17 to 10-03]
b5919931fe
[Firefox:735 hits: 06-20 to 10-03]
f7738e7352
[Firefox: 7 hits: 07-25 to 09-24]		 none[4]
b5919931fe[1]
none [none]		 Win2K-f 33 of 35 18:19:29 18:19:29 1 none none:none
ASM:Graph
none:none
 tElock|
ASProtect|
none|none		 none
lines=90
none		 trace
trace
none
07fabc79ef
[Firefox:19 hits: 06-19 to 09-27]		 07fabc79ef [1] WinXP 0 of 32 03:30:26 03:30:26 1 none ASM:Graph
 Armadillo| 47% lines=81 trace
4c3df24b32
[Firefox:208 hits: 06-17 to 10-03]
6a4845ca11
[Firefox:13 hits: 06-27 to 10-02]		 4c3df24b32 [1]
none [none]		 WinXP
Win2K-f		 0 of 0 05:00:34 05:17:56 2 none ASM:Graph
none:none
 Armadillo|
none|none		 lines=81
none		 trace
none
df17a625ee
[Firefox:263 hits: 01-01 to 10-02]		 9bbdd086c5 [0] WinXP 29 of 29 12:19:22 12:19:22 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
986b59708d
[Firefox:90 hits: 01-14 to 10-01]		 8a00217866 [0] WinXP 29 of 29 18:03:39 18:03:39 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
12e484a198
[Firefox: 3 hits: 10-01 to 10-02]
2e43dc0077
[Firefox: 3 hits: 10-01 to 10-02]		 none[none]
none [none]		 WinXP 34 of 36 22:45:21 22:45:21 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
27b945de66
[Firefox:27 hits: 06-20 to 09-29]		 none[4] WinXP 31 of 32 15:19:25 15:19:25 1 none none:none
 none|none none trace
a8d74af6d5
NEW		 none[none] WinXP 35 of 36 14:35:42 14:35:42 1 none none:none
 none|none none none
a9cfbd1b0c
[Firefox:11 hits: 09-12 to 09-28]		 none[none] WinXP 36 of 36 13:14:35 13:14:35 1 none none:none
 none|none none none
4cc010006c
NEW
bf23b00abd
NEW		 none[none]
none [none]		 WinXP 32 of 36 09:56:21 12:42:05 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0c3d1ec2df
[Firefox:10 hits: 08-11 to 09-29]		 none[none] Win2K-f 32 of 36 03:15:41 03:15:41 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2768 hits: 06-17 to 10-03]
73f1082158
[Firefox:1372 hits: 06-18 to 10-03]
e07c29c4ae
[Firefox:556 hits: 06-19 to 10-03]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 00:47:47 17:45:40 10 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ca47a36342
[Firefox:12 hits: 02-16 to 10-03]		 c3a58f69c6 [0] WinXP 26 of 28 16:14:33 16:14:33 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
3cd595a9ba
NEW		 none[none] WinXP 33 of 36 21:04:07 21:04:07 1 none none:none
 none|none none none
eca9a5fa95
[Firefox:26 hits: 08-09 to 10-02]		 none[none] WinXP 36 of 36 00:10:41 19:57:23 7 none none:none
 none|none none none
7f60162c2c
[Firefox:669 hits: 12-31 to 10-03]		 1aad8e4632 [0] WinXP 25 of 25 06:42:36 15:21:11 5 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
57ce4acac2
[Firefox:226 hits: 06-17 to 10-03]
83f26f5044
[Firefox:24 hits: 06-20 to 10-03]		 57ce4acac2 [1]
none [4]		 WinXP 29 of 32 13:24:28 13:24:28 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
3cd595a9ba
NEW
68f3168201
NEW		 none[none]
none [none]		 WinXP 34 of 36 21:04:07 21:04:07 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
632e315db2
NEW		 none[none] WinXP 35 of 36 20:59:28 20:59:28 1 none none:none
 none|none none none
1540ff87bb
NEW		 none[none] WinXP 35 of 36 08:49:10 08:49:10 1 none none:none
 none|none none none
4cc010006c
NEW		 none[none] WinXP 35 of 36 12:42:05 12:42:05 1 none none:none
 none|none none none
ea096a2bdf
[Firefox:19 hits: 07-12 to 10-03]		 none[none] WinXP 31 of 32 14:12:51 14:12:51 1 none none:none
 none|none none none
71b183b0c8
[Firefox:12 hits: 09-17 to 10-03]		 none[none] WinXP 36 of 36 16:47:25 16:47:25 1 none none:none
 none|none none none
97bc7b537b
NEW		 none[none] WinXP 35 of 36 10:26:23 10:26:23 1 none none:none
 none|none none none
0c3d1ec2df
[Firefox:10 hits: 08-11 to 09-29]
8de905030e
[Firefox:10 hits: 08-11 to 09-29]		 none[none]
none [none]		 Win2K-f 34 of 36 03:15:41 03:15:41 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f3aadc574a
[Firefox: 2 hits: 10-01 to 10-03]		 none[none] WinXP 35 of 36 18:54:43 18:55:06 2 none none:none
 none|none none none
7d99b0e910
[Firefox:1234 hits: 12-31 to 10-03]		 7a70e1b592 [0] WinXP 26 of 28 00:26:04 17:20:23 10 none ASM:Graph
 PolyEnE| 99% lines=68 trace
6cf11d6364
[Firefox:11 hits: 09-12 to 09-24]		 none[none] WinXP 36 of 36 16:26:36 16:26:36 1 none none:none
 none|none none none
03c06c736c
NEW		 none[none] WinXP 35 of 36 02:35:58 02:35:58 1 none none:none
 none|none none none
214bc429e1
[Firefox: 2 hits: 09-25 to 09-26]
9ad48d782a
[Firefox: 2 hits: 09-25 to 09-26]		 none[none]
none [none]		 Win2K-f 32 of 36 02:21:57 03:57:47 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
05b1ed9c9c
NEW		 none[none] Win2K-f 0 of 0 22:44:03 22:44:03 1 none none:none
 none|none none none
d9a4f2f314
[Firefox: 2 hits: 09-29 to 10-02]		 none[none] WinXP 35 of 36 04:07:12 04:07:12 1 none none:none
 none|none none none
cdf8cd94a9
[Firefox:18 hits: 09-14 to 10-02]		 none[none] WinXP 35 of 36 17:20:26 17:20:26 1 none none:none
 none|none none none
09c3d90250
[Firefox:10 hits: 08-04 to 09-26]		 none[none] WinXP 32 of 36 06:58:30 06:58:30 1 none none:none
 none|none none none
2e04b06527
[Firefox:11 hits: 06-18 to 10-03]		 none[4] Win2K-f 30 of 33 02:32:48 02:32:48 1 none none:none
 tElock| none trace
7ab7b989fe
NEW		 none[none] WinXP 35 of 36 11:10:06 11:10:06 1 none none:none
 none|none none none
5706f2fc14
[Firefox: 3 hits: 09-14 to 10-03]		 none[none] Win2K-f 33 of 36 19:01:46 19:01:46 1 none none:none
 none|none none none
1868867d02
[Firefox: 2 hits: 09-29 to 10-03]
3e01fb69e1
[Firefox: 2 hits: 09-29 to 10-03]		 none[none]
none [none]		 WinXP 21 of 36 17:50:10 17:50:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6b1c6d0395
[Firefox: 7 hits: 09-18 to 10-02]		 none[none] WinXP 34 of 36 10:37:54 10:37:54 1 none none:none
 none|none none none