Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


08 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
da00a8e7a1
[Firefox:24 hits: 08-05 to 10-05]
f685f8e027
[Firefox:28 hits: 06-18 to 10-05]		 none[none]
f685f8e027[1]		 WinXP 28 of 33 12:47:35 18:23:46 2 none none:none
ASM:Graph
 none|none
Armadillo|		 48% none
lines=82		 none
trace
53bfe15e91
[Firefox:2950 hits: 06-17 to 10-07]
73f1082158
[Firefox:1451 hits: 06-18 to 10-07]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:40:56 23:47:15 24 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
378a4bac36
[Firefox: 9 hits: 07-01 to 10-01]
b5919931fe
[Firefox:788 hits: 06-20 to 10-07]
d11b4c2e19
[Firefox: 9 hits: 07-01 to 10-01]		 none[none]
b5919931fe[1]
none [none]		 Win2K-f 29 of 33 20:27:25 20:31:16 2 none none:none
ASM:Graph
none:none
 none|none
ASProtect|
none|none		 none
lines=90
none		 none
trace
none
2851817490
[Firefox: 7 hits: 06-27 to 09-25]		 none[none] Win2K-f 32 of 33 07:17:50 07:17:50 1 none none:none
 none|none none none
8da9ca8dd8
NEW
954b58386b
NEW		 none[none]
none [none]		 Win2K-f 31 of 36 14:39:38 14:39:38 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:2950 hits: 06-17 to 10-07]		 none[4] WinXP
Win2K-f		 33 of 33 00:40:56 23:47:15 46 none none:none
 tElock| none trace
34caa6c264
NEW		 none[none] WinXP 34 of 36 12:15:11 13:27:46 2 none none:none
 none|none none none
f592d52f3c
[Firefox: 5 hits: 01-06 to 05-19]		 85a7174aed [0] WinXP 29 of 29 11:33:57 11:33:57 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
87e1117f2a
[Firefox:13 hits: 07-18 to 10-06]		 none[none] Win2K-f 32 of 33 22:34:38 22:34:38 1 none none:none
 none|none none none
0115338c8b
[Firefox: 9 hits: 09-12 to 10-01]		 none[none] Win2K-f 33 of 36 18:32:57 18:32:57 1 none none:none
 none|none none none
bb7681eca8
[Firefox: 4 hits: 09-26 to 10-05]		 none[none] WinXP 32 of 32 07:25:46 07:25:46 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2950 hits: 06-17 to 10-07]
b7082104e4
[Firefox:183 hits: 06-18 to 10-07]		 none[4]
none [4]		 Win2K-f 8 of 33 12:19:14 12:19:14 1 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
6672dcb81a
NEW		 none[none] WinXP 36 of 36 05:31:05 05:31:05 1 none none:none
 none|none none none
c2a03dfdd5
NEW		 none[none] WinXP 34 of 36 13:48:21 22:53:07 2 none none:none
 none|none none none
1b7ec6ce60
[Firefox: 6 hits: 09-16 to 09-24]		 none[none] WinXP 35 of 36 20:57:55 20:57:55 1 none none:none
 none|none none none
47f8cf336a
[Firefox: 3 hits: 09-22 to 10-05]		 none[none] WinXP 0 of 0 13:50:42 13:50:42 1 none none:none
 none|none none none
8793d64e05
NEW		 none[none] WinXP 35 of 36 08:33:56 08:34:28 2 none none:none
 none|none none none
2ad0505cbb
NEW
e07c29c4ae
[Firefox:587 hits: 06-19 to 10-07]
f85a2f9c48
NEW		 none[none]
e07c29c4ae[1]
none [none]		 WinXP 34 of 36 15:38:34 15:38:34 1 none none:none
ASM:Graph
none:none
 none|none
FSG|
none|none		 none
lines=92
none		 none
trace
none
b1da3a5b36
NEW		 none[none] WinXP 35 of 36 23:20:39 23:20:39 1 none none:none
 none|none none none
3a0b35b15c
NEW		 none[none] WinXP 34 of 36 21:48:16 21:48:16 1 none none:none
 none|none none none
f5ab9763ea
[Firefox: 2 hits: 10-03 to 10-03]		 none[none] WinXP 35 of 36 11:16:55 11:16:55 1 none none:none
 none|none none none
c392067a90
NEW		 none[none] WinXP 35 of 36 15:02:23 15:02:23 1 none none:none
 none|none none none
03f912899b
[Firefox:157 hits: 01-08 to 10-07]		 83893bd25d [0] WinXP 32 of 32 05:54:44 17:17:30 3 none ASM:Graph
 none|none 100% lines=65 trace
97fe4b49e5
NEW		 none[none] WinXP 34 of 36 13:50:57 13:50:57 1 none none:none
 none|none none none
4e3381f981
NEW		 none[none] WinXP 35 of 36 10:07:43 10:07:43 1 none none:none
 none|none none none
c7ca96a1e8
[Firefox: 2 hits: 07-21 to 07-24]		 none[none] WinXP 33 of 34 18:13:13 18:13:13 1 none none:none
 none|none none none
3ff96af82f
NEW		 none[none] WinXP 36 of 36 13:28:25 13:28:25 1 none none:none
 none|none none none
741e3b03b3
[Firefox:451 hits: 01-05 to 10-07]		 e0197e8a64 [0] WinXP 31 of 32 02:04:20 14:10:55 2 none ASM:Graph
 none|none 100% lines=62 trace
f353d4eed9
[Firefox:29 hits: 09-17 to 10-07]		 none[none] WinXP 35 of 36 16:17:34 16:17:41 2 none none:none
 none|none none none
bafc37aa76
NEW		 none[none] WinXP 34 of 36 20:24:55 20:24:55 1 none none:none
 none|none none none
2d6c8c447f
[Firefox:11 hits: 09-16 to 10-03]		 none[none] WinXP 36 of 36 21:33:24 21:33:24 1 none none:none
 none|none none none
831f4ee0a7
[Firefox:592 hits: 01-01 to 10-07]		 eb7546c600 [0] WinXP 29 of 29 02:17:46 02:17:46 1 none ASM:Graph
 none|none 100% lines=61 trace
58c343a8d8
[Firefox:34 hits: 06-21 to 10-03]		 58c343a8d8 [1] Win2K-f 28 of 33 15:34:26 15:34:26 1 none ASM:Graph
 Armadillo| 47% lines=82 trace
2e43dc0077
[Firefox: 5 hits: 10-01 to 10-05]
3fd58319f0
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 15:21:04 15:21:04 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
17028f1eda
[Firefox:40 hits: 04-18 to 10-07]		 none[3] WinXP 31 of 32 18:44:56 18:49:39 2 none none:none
 tElock| none trace
378a4bac36
[Firefox: 9 hits: 07-01 to 10-01]
b5919931fe
[Firefox:788 hits: 06-20 to 10-07]		 none[none]
b5919931fe[1]		 Win2K-f 0 of 32 04:12:53 20:31:16 11 none none:none
ASM:Graph
 none|none
ASProtect|		 48% none
lines=90		 none
trace
0115338c8b
[Firefox: 9 hits: 09-12 to 10-01]
321f4fc27d
[Firefox: 9 hits: 09-12 to 10-01]		 none[none]
none [none]		 Win2K-f 31 of 36 18:32:57 18:32:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
93385541f3
[Firefox:31 hits: 06-22 to 10-02]		 none[4] WinXP 32 of 32 02:10:34 02:10:34 1 none none:none
 none|none none trace
8da9ca8dd8
NEW		 none[none] Win2K-f 33 of 36 14:39:38 14:39:38 1 none none:none
 none|none none none
6ec2a8994b
[Firefox:25 hits: 06-18 to 09-26]
bcf66a38c8
[Firefox:12 hits: 07-30 to 09-26]		 none[4]
none [none]		 WinXP 2 of 35 20:33:20 20:33:20 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
57ce4acac2
[Firefox:245 hits: 06-17 to 10-07]		 57ce4acac2 [1] Win2K-f
WinXP		 0 of 33 09:02:23 21:06:46 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
af79e0c602
[Firefox: 9 hits: 01-08 to 10-01]		 none[4] WinXP 29 of 30 12:53:32 12:53:32 1 none none:none
 ASPack| none trace
688576e4d8
NEW		 none[none] WinXP 34 of 36 17:42:09 17:42:09 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:455 hits: 12-31 to 10-07]		 048df78048 [0] WinXP 29 of 29 01:43:43 14:44:10 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:2950 hits: 06-17 to 10-07]
a08f3b74a4
[Firefox:1045 hits: 06-18 to 10-07]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:42:42 22:53:47 19 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
18c7040ea0
NEW		 none[none] WinXP 34 of 36 17:41:22 17:41:22 1 none none:none
 none|none none none
b872c76081
[Firefox:52 hits: 09-13 to 10-07]		 none[none] WinXP 36 of 36 07:52:15 07:52:15 1 none none:none
 none|none none none
4575d9d4f6
[Firefox: 4 hits: 10-01 to 10-07]		 none[none] WinXP 33 of 36 09:01:23 09:01:23 1 none none:none
 none|none none none
2ce489b91a
[Firefox: 2 hits: 10-06 to 10-07]
2f1ec86326
[Firefox: 2 hits: 10-06 to 10-07]		 none[none]
none [none]		 Win2K-f 30 of 36 01:42:24 01:42:24 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
a0139d7ad8
[Firefox:146 hits: 01-03 to 10-07]		 d9e9662db1 [0] WinXP 29 of 29 03:46:10 11:47:30 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
87e1117f2a
[Firefox:13 hits: 07-18 to 10-06]
b4fe4581c3
[Firefox:13 hits: 07-18 to 10-06]		 none[none]
none [none]		 Win2K-f 29 of 33 22:34:38 22:34:38 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6eca10d7e9
NEW		 none[none] WinXP 13 of 36 21:20:13 21:20:13 1 none none:none
 none|none none none
9335b705d0
NEW
d43a1e42d2
NEW		 none[none]
none [none]		 WinXP 35 of 36 03:07:59 03:07:59 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2ad0505cbb
NEW		 none[none] WinXP 31 of 36 15:38:34 15:38:34 1 none none:none
 none|none none none
2851817490
[Firefox: 7 hits: 06-27 to 09-25]
624c441842
[Firefox: 4 hits: 06-27 to 09-25]		 none[none]
none [none]		 Win2K-f 9 of 33 07:17:50 07:17:50 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0ca8face1c
NEW		 none[none] WinXP 35 of 36 08:20:05 08:20:05 1 none none:none
 none|none none none
8a75955033
[Firefox:39 hits: 06-20 to 10-05]
9276c8b36b
[Firefox:39 hits: 06-20 to 10-05]		 none[4]
9276c8b36b[1]		 Win2K-f 28 of 32 09:45:10 09:45:10 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
cc263a661d
[Firefox:12 hits: 09-24 to 10-02]		 none[none] WinXP 36 of 36 18:34:17 18:34:17 1 none none:none
 none|none none none
3373948767
[Firefox:30 hits: 07-03 to 10-05]
c73f738c30
[Firefox:30 hits: 07-03 to 10-05]		 none[none]
none [none]		 Win2K-f 29 of 33 18:24:13 18:24:13 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
6ec2a8994b
[Firefox:25 hits: 06-18 to 09-26]		 none[4] WinXP 30 of 33 20:33:20 20:33:20 1 none none:none
 tElock| none trace
df17a625ee
[Firefox:269 hits: 01-01 to 10-07]		 9bbdd086c5 [0] WinXP 29 of 29 08:47:58 08:47:58 1 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
986b59708d
[Firefox:95 hits: 01-14 to 10-07]		 8a00217866 [0] WinXP 29 of 29 13:30:14 13:30:14 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
2e43dc0077
[Firefox: 5 hits: 10-01 to 10-05]		 none[none] Win2K-f 34 of 36 15:21:04 15:21:04 1 none none:none
 none|none none none
96d089e522
NEW		 none[none] WinXP 34 of 36 00:11:38 09:22:43 2 none none:none
 none|none none none
2ce489b91a
[Firefox: 2 hits: 10-06 to 10-07]		 none[none] Win2K-f 35 of 36 01:42:24 01:42:24 1 none none:none
 none|none none none
53bfe15e91
[Firefox:2950 hits: 06-17 to 10-07]
a08f3b74a4
[Firefox:1045 hits: 06-18 to 10-07]
e07c29c4ae
[Firefox:587 hits: 06-19 to 10-07]		 none[4]
a08f3b74a4[1]
e07c29c4ae[1]		 WinXP 0 of 33 03:07:59 22:53:47 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ca47a36342
[Firefox:15 hits: 02-16 to 10-06]		 c3a58f69c6 [0] WinXP 26 of 28 16:38:04 16:38:04 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
eca9a5fa95
[Firefox:39 hits: 08-09 to 10-07]		 none[none] WinXP 36 of 36 07:30:27 20:21:35 3 none none:none
 none|none none none
e69e23fa76
NEW		 none[none] WinXP 34 of 36 06:57:20 06:57:20 1 none none:none
 none|none none none
8a75955033
[Firefox:39 hits: 06-20 to 10-05]		 none[4] Win2K-f 29 of 32 09:45:10 09:45:10 1 none none:none
 tElock| none trace
6d76aea448
NEW		 none[none] WinXP 35 of 36 09:46:55 09:46:55 1 none none:none
 none|none none none
a43ad8c21e
NEW		 none[none] WinXP 34 of 36 04:31:34 04:31:34 1 none none:none
 none|none none none
4c934f9489
NEW		 none[none] WinXP 36 of 36 07:45:40 07:45:40 1 none none:none
 none|none none none
49d6cdaab4
[Firefox: 7 hits: 09-13 to 10-06]		 none[none] WinXP 34 of 36 09:18:04 09:18:04 1 none none:none
 none|none none none
0b09052fb7
NEW
d8cf9fc784
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 10:50:36 14:02:24 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
3cd7958258
[Firefox:30 hits: 06-17 to 10-05]		 none[4] WinXP 30 of 33 01:55:25 01:55:25 1 none none:none
 tElock| none trace
378a4bac36
[Firefox: 9 hits: 07-01 to 10-01]		 none[none] Win2K-f 30 of 33 20:27:25 20:31:16 2 none none:none
 none|none none none
4575d9d4f6
[Firefox: 4 hits: 10-01 to 10-07]
ed570a2e4d
[Firefox: 3 hits: 10-01 to 10-07]		 none[none]
none [none]		 WinXP 35 of 36 09:01:23 09:01:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
57ce4acac2
[Firefox:245 hits: 06-17 to 10-07]
83f26f5044
[Firefox:25 hits: 06-20 to 10-04]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 21:06:46 21:06:46 1 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f60162c2c
[Firefox:694 hits: 12-31 to 10-07]		 1aad8e4632 [0] WinXP 25 of 25 01:16:04 18:30:33 8 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
e9ee0d4d34
[Firefox: 4 hits: 09-15 to 09-28]		 none[none] WinXP 24 of 36 09:12:39 09:12:39 1 none none:none
 none|none none none
141d1a2779
NEW		 none[none] WinXP 35 of 36 05:59:53 05:59:53 1 none none:none
 none|none none none
71b183b0c8
[Firefox:16 hits: 09-17 to 10-07]		 none[none] WinXP 36 of 36 18:47:41 18:48:40 2 none none:none
 none|none none none
3cd7958258
[Firefox:30 hits: 06-17 to 10-05]
41efedf70f
[Firefox:29 hits: 06-19 to 10-05]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 01:55:25 01:55:25 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
3373948767
[Firefox:30 hits: 07-03 to 10-05]		 none[none] Win2K-f 30 of 33 18:24:13 18:24:13 1 none none:none
 none|none none none
0b09052fb7
NEW		 none[none] Win2K-f 34 of 36 10:50:36 14:02:24 2 none none:none
 none|none none none
3ae357d17b
[Firefox:182 hits: 01-01 to 10-07]		 462a7be171 [0] WinXP 29 of 29 17:47:01 17:47:01 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
da00a8e7a1
[Firefox:24 hits: 08-05 to 10-05]		 none[none] WinXP 34 of 36 12:47:35 18:23:46 2 none none:none
 none|none none none
b5919931fe
[Firefox:788 hits: 06-20 to 10-07]
e191a65a0a
NEW
fe8436c042
NEW		 b5919931fe [1]
none [none]
none [none]		 Win2K-f 27 of 36 08:48:36 08:48:36 1 none ASM:Graph
none:none
none:none
 ASProtect|
none|none
none|none		 lines=90
none
none		 trace
none
none
b1711c43ef
NEW		 none[none] WinXP 35 of 36 18:04:13 18:04:13 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1270 hits: 12-31 to 10-07]		 7a70e1b592 [0] WinXP 26 of 28 00:06:01 23:06:28 11 none ASM:Graph
 PolyEnE| 99% lines=68 trace
b5919931fe
[Firefox:788 hits: 06-20 to 10-07]
e191a65a0a
NEW		 b5919931fe [1]
none [none]		 Win2K-f 33 of 36 08:48:36 08:48:36 1 none ASM:Graph
none:none
 ASProtect|
none|none		 lines=90
none		 trace
none
7e8bfa9b49
[Firefox: 6 hits: 10-01 to 10-07]		 none[none] WinXP 35 of 36 00:11:49 19:56:31 4 none none:none
 none|none none none
9335b705d0
NEW		 none[none] WinXP 32 of 36 03:07:59 03:07:59 1 none none:none
 none|none none none
26e3526604
[Firefox: 7 hits: 09-16 to 10-06]		 none[none] WinXP 34 of 36 11:09:43 11:09:43 1 none none:none
 none|none none none
87bf2f533f
NEW		 none[none] WinXP 35 of 36 09:51:07 09:51:07 1 none none:none
 none|none none none
ab5e47bf8d
[Firefox:44 hits: 01-02 to 10-03]		 none[3] WinXP 29 of 29 22:29:53 22:29:53 1 none none:none
 ASPack| none trace
11a5f4653d
NEW		 none[none] WinXP 35 of 36 00:30:44 00:30:44 1 none none:none
 none|none none none
69d773e78a
[Firefox: 2 hits: 09-28 to 09-28]		 none[none] WinXP 35 of 36 21:45:52 21:45:52 1 none none:none
 none|none none none
915419be49
NEW		 none[none] WinXP 35 of 36 00:50:04 00:50:04 1 none none:none
 none|none none none