Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


06 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
79fdac8c50
[Firefox: 4 hits: 09-16 to 10-02]		 none[none] WinXP 34 of 36 10:30:06 10:30:06 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
73f1082158
[Firefox:1410 hits: 06-18 to 10-05]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 01:21:37 23:27:26 19 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a4d3ac0cbe
NEW
b360625b8c
NEW		 none[none]
none [none]		 WinXP 32 of 36 17:58:20 17:58:20 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
9dc3d96bce
NEW		 none[none] WinXP 30 of 36 06:46:46 06:46:46 1 none none:none
 none|none none none
a639f0b353
NEW		 none[none] WinXP 34 of 36 13:54:34 13:54:34 1 none none:none
 none|none none none
91dc355a93
[Firefox:21 hits: 09-25 to 09-30]
bea8cb1865
[Firefox:25 hits: 08-11 to 10-03]
e255e100de
NEW
fac78fde16
[Firefox: 8 hits: 09-13 to 10-03]		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 35 of 36 13:13:20 13:13:20 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
c3bc53e727
[Firefox: 5 hits: 09-14 to 09-25]		 none[none] WinXP 33 of 36 10:24:34 10:24:34 1 none none:none
 none|none none none
1fcc146d70
[Firefox:52 hits: 01-02 to 10-03]		 258fafe892 [0] WinXP 29 of 29 10:19:21 10:19:21 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]		 none[4] WinXP
Win2K-f		 33 of 33 01:21:37 23:38:20 45 none none:none
 tElock| none trace
87e1117f2a
[Firefox:11 hits: 07-18 to 10-04]		 none[none] Win2K-f
WinXP		 32 of 33 02:30:13 03:28:06 2 none none:none
 none|none none none
492957db81
[Firefox:22 hits: 01-01 to 10-03]		 064e4d7742 [0] WinXP 29 of 29 06:26:03 11:17:42 3 none ASM:Graph
 PolyEnE| 100% lines=69
embedded dns		 trace
405ee58b18
NEW		 none[none] Win2K-f 14 of 36 16:12:48 16:12:51 2 none none:none
 none|none none none
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
b7082104e4
[Firefox:180 hits: 06-18 to 10-05]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 02:07:11 20:34:07 2 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
59f1b164b0
NEW
d2e0990a9d
NEW
e3a22772ff
NEW		 none[none]
none [none]
none [none]		 WinXP 32 of 36 21:29:05 21:29:05 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
b8d9d28ce7
[Firefox: 2 hits: 10-01 to 10-01]		 none[none] WinXP 35 of 36 05:28:31 05:28:31 1 none none:none
 none|none none none
168aab35a3
[Firefox:156 hits: 06-17 to 10-05]
4c3df24b32
[Firefox:213 hits: 06-17 to 10-04]
59f1b164b0
NEW
d2e0990a9d
NEW		 none[4]
4c3df24b32[1]
none [none]
none [none]		 WinXP
Win2K-f		 18 of 36 20:30:26 23:00:06 5 none none:none
ASM:Graph
none:none
none:none
 tElock|
Armadillo|
none|none
none|none		 none
lines=81
none
none		 trace
trace
none
none
1fd891fe6b
NEW		 none[none] WinXP 0 of 36 11:34:12 11:34:12 1 none none:none
 none|none none none
168aab35a3
[Firefox:156 hits: 06-17 to 10-05]		 none[4] Win2K-f 31 of 33 11:12:36 23:00:06 2 none none:none
 tElock| none trace
73ce2b74da
[Firefox:20 hits: 06-18 to 10-01]		 73ce2b74da [1] WinXP 3 of 33 02:18:05 14:49:05 2 none ASM:Graph
 Armadillo| 47% lines=81 trace
a12cab51ef
[Firefox:563 hits: 01-01 to 10-05]		 40f7f463c4 [0] WinXP 29 of 29 13:00:31 13:00:31 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
03f912899b
[Firefox:154 hits: 01-08 to 10-03]		 83893bd25d [0] WinXP 32 of 32 10:33:19 10:33:19 1 none ASM:Graph
 none|none 100% lines=65 trace
c392067a90
NEW		 none[none] WinXP 35 of 36 07:43:52 07:43:52 1 none none:none
 none|none none none
8b2985b52d
NEW		 none[none] WinXP 35 of 36 15:36:03 15:36:03 1 none none:none
 none|none none none
7dd1fe2970
[Firefox:21 hits: 02-03 to 09-28]		 dcc673c815 [0] WinXP 30 of 32 11:37:44 11:37:44 1 none ASM:Graph
 ASPack| 72% lines=374
embedded dns		 trace
168aab35a3
[Firefox:156 hits: 06-17 to 10-05]
4c3df24b32
[Firefox:213 hits: 06-17 to 10-04]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 10:45:38 23:00:06 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
47af15bf90
NEW		 none[none] WinXP 36 of 36 18:55:56 18:55:56 1 none none:none
 none|none none none
738eb92db2
NEW		 none[none] WinXP 32 of 36 14:28:50 14:28:50 1 none none:none
 none|none none none
168aab35a3
[Firefox:156 hits: 06-17 to 10-05]
667f0c59f3
[Firefox:27 hits: 07-04 to 10-05]		 none[4]
none [none]		 Win2K-f 31 of 33 11:12:36 11:12:36 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
741e3b03b3
[Firefox:443 hits: 01-05 to 10-05]		 e0197e8a64 [0] WinXP 31 of 32 02:36:33 02:36:33 1 none ASM:Graph
 none|none 100% lines=62 trace
393d3a40db
[Firefox: 9 hits: 02-14 to 10-04]		 8a0ff8065a [0] WinXP 31 of 32 10:02:58 10:02:58 1 none ASM:Graph
 PolyEnE| 0% lines=76 trace
91dc355a93
[Firefox:21 hits: 09-25 to 09-30]
bea8cb1865
[Firefox:25 hits: 08-11 to 10-03]		 none[none]
none [none]		 Win2K-f 32 of 36 13:13:20 13:13:20 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
831f4ee0a7
[Firefox:586 hits: 01-01 to 10-05]		 eb7546c600 [0] WinXP 29 of 29 03:59:56 14:20:29 4 none ASM:Graph
 none|none 100% lines=61 trace
83e033e38f
NEW		 none[none] Win2K-f 31 of 36 22:43:11 22:43:11 1 none none:none
 none|none none none
778cdbeb40
[Firefox: 2 hits: 10-01 to 10-01]		 none[none] WinXP 34 of 36 22:16:09 22:16:09 1 none none:none
 none|none none none
eec7cce07c
[Firefox: 7 hits: 08-15 to 09-16]		 none[none] WinXP 29 of 29 22:18:34 22:18:34 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
73f1082158
[Firefox:1410 hits: 06-18 to 10-05]
b5919931fe
[Firefox:760 hits: 06-20 to 10-05]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 06:57:54 23:27:26 15 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
fccab86427
NEW		 none[none] WinXP 35 of 36 12:57:15 12:57:15 1 none none:none
 none|none none none
bfec7d0b0b
[Firefox:14 hits: 08-06 to 10-02]		 none[none] WinXP 35 of 36 10:47:45 10:47:45 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
57ce4acac2
[Firefox:235 hits: 06-17 to 10-05]		 none[4]
57ce4acac2[1]		 Win2K-f
WinXP		 0 of 33 14:56:06 23:38:20 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
49ef7837c2
NEW		 none[none] Win2K-f 2 of 36 14:16:25 17:07:43 3 none none:none
 none|none none none
e104071f90
NEW		 none[none] WinXP 34 of 36 09:04:56 09:04:56 1 none none:none
 none|none none none
8533808823
NEW		 none[none] WinXP 35 of 36 06:51:09 06:51:09 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:449 hits: 12-31 to 10-05]		 048df78048 [0] WinXP 29 of 29 12:58:09 12:58:09 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
a08f3b74a4
[Firefox:1006 hits: 06-18 to 10-05]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 04:06:17 23:26:25 18 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
b872c76081
[Firefox:47 hits: 09-13 to 10-05]		 none[none] WinXP 36 of 36 08:51:24 15:28:45 2 none none:none
 none|none none none
59f1b164b0
NEW
a08f3b74a4
[Firefox:1006 hits: 06-18 to 10-05]
d2e0990a9d
NEW
ddd2a2b264
[Firefox: 4 hits: 06-17 to 10-04]		 none[none]
a08f3b74a4[1]
none [none]
none [4]		 WinXP 31 of 33 20:30:26 20:30:26 1 none none:none
ASM:Graph
none:none
none:none
 none|none
Armadillo|
none|none
tElock|		 none
lines=81
none
none		 none
trace
none
trace
168aab35a3
[Firefox:156 hits: 06-17 to 10-05]
4c3df24b32
[Firefox:213 hits: 06-17 to 10-04]
59f1b164b0
NEW		 none[4]
4c3df24b32[1]
none [none]		 WinXP
Win2K-f		 22 of 36 20:30:26 23:00:06 5 none none:none
ASM:Graph
none:none
 tElock|
Armadillo|
none|none		 none
lines=81
none		 trace
trace
none
09c3d90250
[Firefox:12 hits: 08-04 to 10-05]
8f34a39070
[Firefox:12 hits: 08-04 to 10-05]		 none[none]
none [none]		 Win2K-f 34 of 36 11:26:24 11:26:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2ce489b91a
NEW
2f1ec86326
NEW		 none[none]
none [none]		 WinXP 30 of 36 15:53:43 15:53:43 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
14d64882da
[Firefox: 2 hits: 09-21 to 09-27]		 none[none] Win2K-f 34 of 36 11:16:40 11:16:40 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:136 hits: 01-03 to 10-05]		 d9e9662db1 [0] WinXP 29 of 29 05:08:43 12:27:16 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
32a0d7d0e0
[Firefox:24 hits: 01-11 to 10-02]		 d791762796 [0] WinXP 29 of 29 06:19:37 06:19:37 1 none ASM:Graph
 tElock| 100% lines=81
embedded dns		 trace
87e1117f2a
[Firefox:11 hits: 07-18 to 10-04]
b4fe4581c3
[Firefox:11 hits: 07-18 to 10-04]		 none[none]
none [none]		 Win2K-f
WinXP		 29 of 33 02:30:13 03:28:06 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a84ffdf670
[Firefox:14 hits: 09-14 to 10-05]		 none[none] WinXP 36 of 36 21:10:34 21:10:34 1 none none:none
 none|none none none
1ac39aea6b
[Firefox: 5 hits: 06-28 to 09-29]
59f1b164b0
NEW
bfed6c7250
NEW		 none[none]
none [none]
none [none]		 WinXP 33 of 36 20:59:37 20:59:37 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
c6059fcbd5
[Firefox: 3 hits: 09-23 to 10-05]		 none[none] WinXP 34 of 36 05:44:25 06:30:25 2 none none:none
 none|none none none
9086fe4014
NEW
c337e5a5cd
NEW		 none[none]
none [none]		 Win2K-f 31 of 36 03:41:40 03:41:40 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
91dc355a93
[Firefox:21 hits: 09-25 to 09-30]
ab39c3329a
NEW		 none[none]
none [none]		 Win2K-f 14 of 36 22:53:10 22:53:10 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
16874933ea
[Firefox:49 hits: 06-18 to 10-05]
76ee340669
[Firefox:49 hits: 06-18 to 10-05]		 16874933ea [1]
none [4]		 Win2K-f 33 of 33 04:20:22 04:20:22 1 none ASM:Graph
none:none
 Armadillo|
PolyEnE|		 lines=82
none		 trace
trace
4515dee6bc
NEW		 none[none] WinXP 34 of 36 02:08:44 02:08:44 1 none none:none
 none|none none none
1fd891fe6b
NEW
df17a625ee
[Firefox:265 hits: 01-01 to 10-05]		 none[none]
9bbdd086c5[0]		 WinXP 29 of 29 02:03:30 11:34:12 2 none none:none
ASM:Graph
 none|none
ASPack|		 49% none
lines=186
embedded dns		 none
trace
31b8bb70f7
NEW		 none[none] WinXP 35 of 36 10:34:10 13:37:50 3 none none:none
 none|none none none
bd24805706
NEW		 none[none] WinXP 35 of 36 15:35:38 15:35:38 1 none none:none
 none|none none none
1ac39aea6b
[Firefox: 5 hits: 06-28 to 09-29]		 none[none] WinXP 8 of 33 20:59:37 20:59:37 1 none none:none
 none|none none none
1a8dccb1b8
NEW		 none[none] WinXP 35 of 36 19:47:23 19:47:23 1 none none:none
 none|none none none
bf1ba17fdd
NEW		 none[none] WinXP 34 of 36 13:54:52 13:54:52 1 none none:none
 none|none none none
16874933ea
[Firefox:49 hits: 06-18 to 10-05]		 16874933ea [1] Win2K-f 29 of 33 04:20:22 04:20:22 1 none ASM:Graph
 Armadillo| 48% lines=82 trace
2ce489b91a
NEW		 none[none] WinXP 35 of 36 15:53:43 15:53:43 1 none none:none
 none|none none none
bc28340042
NEW		 none[none] WinXP 34 of 36 15:29:26 18:54:29 3 none none:none
 none|none none none
53bfe15e91
[Firefox:2857 hits: 06-17 to 10-05]
a08f3b74a4
[Firefox:1006 hits: 06-18 to 10-05]
e07c29c4ae
[Firefox:571 hits: 06-19 to 10-05]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 03:28:06 22:47:32 7 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ca47a36342
[Firefox:14 hits: 02-16 to 10-05]		 c3a58f69c6 [0] WinXP 26 of 28 08:13:19 08:13:19 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
eca9a5fa95
[Firefox:34 hits: 08-09 to 10-05]		 none[none] WinXP 36 of 36 04:29:35 12:08:13 2 none none:none
 none|none none none
59f1b164b0
NEW
6e2eaa0359
[Firefox:14 hits: 07-10 to 10-05]
740e3bffe0
[Firefox:15 hits: 06-25 to 10-05]		 none[none]
none [none]
none [none]		 Win2K-f 24 of 33 22:40:03 22:40:03 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
a43ad8c21e
NEW		 none[none] WinXP 34 of 36 20:58:52 20:58:52 1 none none:none
 none|none none none
49d6cdaab4
[Firefox: 6 hits: 09-13 to 09-25]		 none[none] WinXP 34 of 36 06:19:25 06:19:25 1 none none:none
 none|none none none
7f60162c2c
[Firefox:679 hits: 12-31 to 10-05]		 1aad8e4632 [0] WinXP 25 of 25 05:16:56 17:47:03 8 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
59f1b164b0
NEW
6e2eaa0359
[Firefox:14 hits: 07-10 to 10-05]		 none[none]
none [none]		 Win2K-f 31 of 33 22:40:03 22:40:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f2668b51f1
[Firefox: 7 hits: 01-04 to 06-25]		 none[4] WinXP 31 of 32 00:12:05 00:12:05 1 none none:none
 PolyEnE| none trace
91dc355a93
[Firefox:21 hits: 09-25 to 09-30]		 none[none] Win2K-f 15 of 36 11:28:01 22:53:10 3 none none:none
 none|none none none
ea096a2bdf
[Firefox:20 hits: 07-12 to 10-04]		 none[none] WinXP 31 of 32 06:01:34 06:01:34 1 none none:none
 none|none none none
71b183b0c8
[Firefox:13 hits: 09-17 to 10-04]		 none[none] WinXP 36 of 36 21:52:04 21:52:27 2 none none:none
 none|none none none
f9d832dfd2
[Firefox: 2 hits: 09-22 to 10-03]		 none[none] WinXP 0 of 0 17:31:50 17:31:50 1 none none:none
 none|none none none
cc6554837b
NEW		 none[none] Win2K-f 32 of 36 04:35:34 04:35:34 1 none none:none
 none|none none none
7354ff7015
[Firefox: 2 hits: 10-05 to 10-05]		 none[none] WinXP 35 of 36 06:38:10 06:38:10 1 none none:none
 none|none none none
3ae357d17b
[Firefox:179 hits: 01-01 to 09-29]		 462a7be171 [0] WinXP 29 of 29 12:53:36 12:53:36 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
ae024849a2
[Firefox: 3 hits: 09-13 to 09-20]		 none[none] WinXP 35 of 36 05:43:10 05:43:10 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1251 hits: 12-31 to 10-05]		 7a70e1b592 [0] WinXP 26 of 28 02:22:23 21:30:52 10 none ASM:Graph
 PolyEnE| 99% lines=68 trace
73ce2b74da
[Firefox:20 hits: 06-18 to 10-01]
79c01ec060
[Firefox:51 hits: 06-18 to 10-05]		 73ce2b74da [1]
none [4]		 WinXP 33 of 33 02:18:05 14:49:05 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7e8bfa9b49
[Firefox: 3 hits: 10-01 to 10-05]		 none[none] WinXP 35 of 36 02:38:33 16:09:59 2 none none:none
 none|none none none
a4d3ac0cbe
NEW		 none[none] WinXP 34 of 36 17:58:20 17:58:20 1 none none:none
 none|none none none
03c06c736c
[Firefox: 3 hits: 10-04 to 10-05]		 none[none] WinXP 35 of 36 09:47:44 09:47:44 1 none none:none
 none|none none none
26e3526604
[Firefox: 6 hits: 09-16 to 09-27]		 none[none] WinXP 34 of 36 13:55:37 13:55:37 1 none none:none
 none|none none none
1509c8d024
[Firefox:34 hits: 06-17 to 10-05]
b5919931fe
[Firefox:760 hits: 06-20 to 10-05]
f23b040440
[Firefox:23 hits: 06-22 to 10-05]		 none[4]
b5919931fe[1]
f23b040440[1]		 Win2K-f 30 of 32 07:26:17 07:26:17 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
ASProtect|
Armadillo|		 47% none
lines=90
lines=82		 trace
trace
trace
83e033e38f
NEW
b347153b02
NEW		 none[none]
none [none]		 Win2K-f 33 of 36 22:43:11 22:43:11 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
91dc355a93
[Firefox:21 hits: 09-25 to 09-30]
bea8cb1865
[Firefox:25 hits: 08-11 to 10-03]
e255e100de
NEW		 none[none]
none [none]
none [none]		 Win2K-f 13 of 36 13:13:20 13:13:20 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
d9a4f2f314
[Firefox: 5 hits: 09-29 to 10-05]		 none[none] WinXP 35 of 36 10:51:14 10:51:14 1 none none:none
 none|none none none
14d64882da
[Firefox: 2 hits: 09-21 to 09-27]
1509c8d024
[Firefox:34 hits: 06-17 to 10-05]		 none[none]
none [4]		 Win2K-f 31 of 33 07:26:17 11:16:40 2 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
09c3d90250
[Firefox:12 hits: 08-04 to 10-05]		 none[none] Win2K-f 32 of 36 11:26:24 11:26:24 1 none none:none
 none|none none none
3208c0041e
NEW		 none[none] WinXP 34 of 36 09:16:31 09:16:31 1 none none:none
 none|none none none
72b1a321fb
NEW		 none[none] Win2K-f 13 of 36 11:28:01 11:28:01 1 none none:none
 none|none none none
9086fe4014
NEW		 none[none] Win2K-f 21 of 36 03:41:40 03:41:40 1 none none:none
 none|none none none