Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

09 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

475d9a7753
[Firefox: 7 hits: 06-22 to 10-05]
62abca87d8
NEW none[4]
none [none] WinXP 0 of 36 21:09:41 21:09:41 1 none none:none
none:none
tElock|
none|none none
none trace
none

1a9ce5b5e9
NEW none[none] Win2K-f 32 of 36 19:54:40 19:54:40 1 none none:none
none|none none none

3e01fb69e1
[Firefox: 3 hits: 09-29 to 10-04]
6b997bcb17
[Firefox: 3 hits: 09-29 to 10-04] none[none]
none [none] WinXP 21 of 36 17:54:02 17:54:02 1 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:2996 hits: 06-17 to 10-08]
73f1082158
[Firefox:1475 hits: 06-18 to 10-08] none[4]
73f1082158[1] Win2K-f
WinXP 0 of 32 00:20:56 23:12:42 11 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

22999be88c
[Firefox:33 hits: 04-05 to 10-05] eda2056971 [0] WinXP 31 of 32 09:32:02 19:00:01 3 none ASM:Graph
PolyEnE| 100% lines=154
embedded dns trace

5a6eafb317
NEW none[none] WinXP 35 of 36 13:29:35 13:29:35 1 none none:none
none|none none none

1595515522
NEW none[none] WinXP 34 of 36 00:37:50 00:37:50 1 none none:none
none|none none none

53bfe15e91
[Firefox:2996 hits: 06-17 to 10-08] none[4] Win2K-f
WinXP 33 of 33 00:20:56 23:12:42 29 none none:none
tElock| none trace

801c8f8e60
NEW none[none] WinXP 35 of 36 15:23:38 15:23:38 1 none none:none
none|none none none

87e1117f2a
[Firefox:14 hits: 07-18 to 10-08] none[none] Win2K-f 32 of 33 02:11:35 02:11:35 1 none none:none
none|none none none

bb7681eca8
[Firefox: 5 hits: 09-26 to 10-08] none[none] WinXP 32 of 32 08:37:03 09:27:37 3 none none:none
none|none none none

7f89b38665
[Firefox:23 hits: 08-02 to 10-07] none[none] Win2K-f 32 of 36 16:46:50 16:46:50 1 none none:none
none|none none none

53bfe15e91
[Firefox:2996 hits: 06-17 to 10-08]
b5919931fe
[Firefox:799 hits: 06-20 to 10-08]
b7082104e4
[Firefox:184 hits: 06-18 to 10-08] none[4]
b5919931fe[1]
none [4] WinXP
Win2K-f 8 of 33 10:48:13 20:37:22 4 none none:none
ASM:Graph
none:none
tElock|
ASProtect|
tElock| none
lines=90
none trace
trace
trace

6672dcb81a
[Firefox: 2 hits: 10-04 to 10-08] none[none] WinXP 36 of 36 09:45:12 09:45:12 1 none none:none
none|none none none

168aab35a3
[Firefox:159 hits: 06-17 to 10-07] none[4] Win2K-f 31 of 33 00:47:52 00:47:52 1 none none:none
tElock| none trace

0c390db94d
[Firefox: 2 hits: 10-01 to 10-05] none[none] WinXP 34 of 36 20:43:49 20:43:49 1 none none:none
none|none none none

73ce2b74da
[Firefox:22 hits: 06-18 to 10-06] 73ce2b74da [1] Win2K-f 3 of 33 15:00:57 15:00:57 1 none ASM:Graph
Armadillo| 47% lines=81 trace

6f64f9065d
NEW none[none] Win2K-f 32 of 36 11:34:14 11:34:14 1 none none:none
none|none none none

475d9a7753
[Firefox: 7 hits: 06-22 to 10-05] none[4] WinXP 30 of 32 05:55:02 21:09:41 2 none none:none
tElock| none trace

0ffc9bc5ec
NEW
a12cab51ef
[Firefox:568 hits: 01-01 to 10-07] none[none]
40f7f463c4[0] WinXP 29 of 29 23:11:29 23:11:29 1 none none:none
ASM:Graph
none|none
ASPack| 54% none
lines=281
embedded dns none
trace

d30ff1b325
NEW none[none] Win2K-f
WinXP 34 of 36 15:18:12 19:27:30 2 none none:none
none|none none none

f502585714
[Firefox:44 hits: 01-02 to 09-24] ae590430c5 [0] WinXP 29 of 29 11:49:16 11:51:14 2 none ASM:Graph
PolyEnE| 100% lines=63 trace

f5ab9763ea
[Firefox: 3 hits: 10-03 to 10-08] none[none] WinXP 35 of 36 03:02:01 03:02:01 1 none none:none
none|none none none

03f912899b
[Firefox:160 hits: 01-08 to 10-08] 83893bd25d [0] WinXP 32 of 32 17:34:26 17:34:26 1 none ASM:Graph
none|none 100% lines=65 trace

c83514acfc
NEW none[none] WinXP 34 of 36 08:58:40 08:58:40 1 none none:none
none|none none none

70ec75ed62
NEW
fa32be2706
NEW none[none]
none [none] WinXP 32 of 36 07:28:18 07:28:18 1 none none:none
none:none
none|none
none|none none
none none
none

818e0a7e99
NEW none[none] WinXP 35 of 36 12:18:24 12:18:24 1 none none:none
none|none none none

d30ff1b325
NEW
f64394d4d8
NEW none[none]
none [none] Win2K-f
WinXP 32 of 36 15:18:12 19:27:30 2 none none:none
none:none
none|none
none|none none
none none
none

7b1a3bf102
[Firefox: 2 hits: 08-02 to 08-27] none[none] WinXP 35 of 36 12:32:43 12:32:43 1 none none:none
none|none none none

4c3df24b32
[Firefox:215 hits: 06-17 to 10-06] 4c3df24b32 [1] Win2K-f
WinXP 0 of 33 00:47:52 15:55:24 2 none ASM:Graph
Armadillo| 47% lines=81 trace

0ffc9bc5ec
NEW none[none] WinXP 0 of 36 23:11:29 23:11:29 1 none none:none
none|none none none

741e3b03b3
[Firefox:453 hits: 01-05 to 10-08] e0197e8a64 [0] WinXP 31 of 32 12:48:27 15:48:59 3 none ASM:Graph
none|none 100% lines=62 trace

51835ccab3
NEW none[none] WinXP 34 of 36 12:22:49 12:22:49 1 none none:none
none|none none none

d94c8976cd
NEW none[none] WinXP 35 of 36 04:13:11 04:13:11 1 none none:none
none|none none none

2949152a24
[Firefox: 6 hits: 07-02 to 08-15] none[none] WinXP 30 of 32 23:22:19 23:22:19 1 none none:none
none|none none none

f353d4eed9
[Firefox:31 hits: 09-17 to 10-08] none[none] WinXP 35 of 36 18:40:33 18:40:33 1 none none:none
none|none none none

96dd1ffa53
NEW none[none] WinXP 34 of 36 11:08:57 11:09:52 2 none none:none
none|none none none

05b25f49cb
NEW none[none] WinXP 35 of 36 17:20:47 17:20:47 1 none none:none
none|none none none

831f4ee0a7
[Firefox:593 hits: 01-01 to 10-08] eb7546c600 [0] WinXP 29 of 29 01:40:57 22:59:39 4 none ASM:Graph
none|none 100% lines=61 trace

19a5a36f52
NEW none[none] WinXP 35 of 36 02:04:55 02:04:55 1 none none:none
none|none none none

16874933ea
[Firefox:51 hits: 06-18 to 10-07]
76ee340669
[Firefox:51 hits: 06-18 to 10-07]
b5919931fe
[Firefox:799 hits: 06-20 to 10-08] 16874933ea [1]
none [4]
b5919931fe[1] Win2K-f 0 of 32 00:47:52 22:42:41 9 none ASM:Graph
none:none
ASM:Graph
Armadillo|
PolyEnE|
ASProtect| 48% lines=82
none
lines=90 trace
trace
trace

3d92fb16ce
NEW none[none] WinXP 32 of 36 13:46:07 13:46:07 1 none none:none
none|none none none

53bfe15e91
[Firefox:2996 hits: 06-17 to 10-08]
57ce4acac2
[Firefox:249 hits: 06-17 to 10-08] none[4]
57ce4acac2[1] Win2K-f
WinXP 0 of 33 15:32:25 21:04:10 3 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

1a88bd5450
[Firefox: 2 hits: 10-02 to 10-04] none[none] WinXP 32 of 36 15:00:22 15:00:22 1 none none:none
none|none none none

6df1b03604
[Firefox: 4 hits: 09-14 to 10-05] none[none] Win2K-f 33 of 36 03:21:57 03:21:57 1 none none:none
none|none none none

269540d8b6
[Firefox: 2 hits: 10-03 to 10-05] none[none] Win2K-f 33 of 36 09:56:49 09:56:49 1 none none:none
none|none none none

2587501592
NEW
af79e0c602
[Firefox:10 hits: 01-08 to 10-08] none[none]
none [4] WinXP 29 of 30 08:57:00 08:57:00 1 none none:none
none:none
none|none
ASPack| none
none none
trace

1a2c0e6130
[Firefox:457 hits: 12-31 to 10-08] 048df78048 [0] WinXP 29 of 29 12:19:12 17:17:20 2 none ASM:Graph
none|none 100% lines=61 trace

53bfe15e91
[Firefox:2996 hits: 06-17 to 10-08]
a08f3b74a4
[Firefox:1064 hits: 06-18 to 10-08] none[4]
a08f3b74a4[1] WinXP
Win2K-f 0 of 33 00:36:28 23:05:18 12 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

83c75e25f8
NEW none[none] WinXP 34 of 36 18:35:33 18:35:33 1 none none:none
none|none none none

18c7040ea0
[Firefox: 2 hits: 09-15 to 10-08] none[none] WinXP 34 of 36 12:43:59 12:43:59 1 none none:none
none|none none none

2bf8f809de
NEW none[none] WinXP 35 of 36 10:02:16 10:02:16 1 none none:none
none|none none none

b872c76081
[Firefox:53 hits: 09-13 to 10-08] none[none] WinXP 36 of 36 06:46:20 22:19:56 3 none none:none
none|none none none

7f89b38665
[Firefox:23 hits: 08-02 to 10-07]
a51a50404e
[Firefox:23 hits: 08-02 to 10-07] none[none]
none [none] Win2K-f 34 of 36 16:46:50 16:46:50 1 none none:none
none:none
none|none
none|none none
none none
none

09e933c12d
NEW none[none] WinXP 36 of 36 16:56:09 21:31:42 3 none none:none
none|none none none

09c3d90250
[Firefox:13 hits: 08-04 to 10-06]
8f34a39070
[Firefox:13 hits: 08-04 to 10-06] none[none]
none [none] Win2K-f 34 of 36 03:12:34 03:12:34 1 none none:none
none:none
none|none
none|none none
none none
none

ad027a0632
NEW none[none] WinXP 35 of 36 04:52:40 04:52:40 1 none none:none
none|none none none

a0139d7ad8
[Firefox:150 hits: 01-03 to 10-08] d9e9662db1 [0] WinXP 29 of 29 07:11:10 14:52:10 4 none ASM:Graph
PolyEnE| 99% lines=68 trace

3320c728b1
NEW none[none] WinXP 33 of 36 17:18:21 17:18:21 1 none none:none
none|none none none

87e1117f2a
[Firefox:14 hits: 07-18 to 10-08]
b4fe4581c3
[Firefox:14 hits: 07-18 to 10-08] none[none]
none [none] Win2K-f 29 of 33 02:11:35 02:11:35 1 none none:none
none:none
none|none
none|none none
none none
none

667bf08ae8
NEW none[none] WinXP 34 of 36 09:52:27 09:52:50 2 none none:none
none|none none none

350916e912
NEW none[none] WinXP 34 of 36 17:20:29 17:20:29 1 none none:none
none|none none none

176ca2b1f1
NEW none[none] WinXP 34 of 36 00:51:55 00:52:18 2 none none:none
none|none none none

16874933ea
[Firefox:51 hits: 06-18 to 10-07]
76ee340669
[Firefox:51 hits: 06-18 to 10-07] 16874933ea [1]
none [4] Win2K-f 33 of 33 22:42:41 22:42:41 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

1a9ce5b5e9
NEW
a2db11fbb8
NEW none[none]
none [none] Win2K-f 34 of 36 19:54:40 19:54:40 1 none none:none
none:none
none|none
none|none none
none none
none

70ec75ed62
NEW none[none] WinXP 35 of 36 07:28:18 07:28:18 1 none none:none
none|none none none

fe9ec83ed0
NEW none[none] WinXP 34 of 36 13:13:00 13:13:00 1 none none:none
none|none none none

4dd604b809
NEW none[none] WinXP 35 of 36 05:24:14 05:24:14 1 none none:none
none|none none none

1b9a1f025e
NEW none[none] WinXP 35 of 36 05:01:02 05:01:02 1 none none:none
none|none none none

7f66e51c85
[Firefox:11 hits: 07-11 to 09-21]
9d12fe9d3b
[Firefox:12 hits: 07-11 to 09-21] none[none]
none [none] Win2K-f 29 of 32 06:52:04 06:52:04 1 none none:none
none:none
none|none
none|none none
none none
none

13754a62da
NEW none[none] WinXP 35 of 36 08:48:52 08:48:52 1 none none:none
none|none none none

e4baeefcc1
NEW none[none] WinXP 35 of 36 11:02:54 11:02:54 1 none none:none
none|none none none

1f59c01aef
[Firefox:10 hits: 08-01 to 10-01] none[none] Win2K-f 34 of 36 22:19:21 22:19:21 1 none none:none
none|none none none

090753e602
NEW
79595a71bb
NEW none[none]
none [none] Win2K-f 33 of 36 18:26:11 18:26:11 1 none none:none
none:none
none|none
none|none none
none none
none

1f59c01aef
[Firefox:10 hits: 08-01 to 10-01]
dc92683d9a
[Firefox:17 hits: 06-19 to 10-01] none[none]
dc92683d9a[1] Win2K-f 29 of 33 22:19:21 22:19:21 1 none none:none
ASM:Graph
none|none
Armadillo| 47% none
lines=82 none
trace

d6df3972a0
[Firefox:32 hits: 01-07 to 09-24] 39eeef52a4 [0] WinXP 29 of 29 01:16:44 01:16:44 1 none ASM:Graph
PolyEnE| 100% lines=65 trace

16874933ea
[Firefox:51 hits: 06-18 to 10-07] 16874933ea [1] Win2K-f 29 of 33 22:42:41 22:42:41 1 none ASM:Graph
Armadillo| 48% lines=82 trace

f9e03b93bc
NEW none[none] WinXP 35 of 36 11:44:35 11:46:22 2 none none:none
none|none none none

6df1b03604
[Firefox: 4 hits: 09-14 to 10-05]
74fa06e356
[Firefox: 4 hits: 09-14 to 10-05] none[none]
none [none] Win2K-f 34 of 36 03:21:57 03:21:57 1 none none:none
none:none
none|none
none|none none
none none
none

2949152a24
[Firefox: 6 hits: 07-02 to 08-15]
e07c29c4ae
[Firefox:592 hits: 06-19 to 10-08]
f1a10a0d85
[Firefox: 6 hits: 07-02 to 08-15] none[none]
e07c29c4ae[1]
none [none] WinXP 30 of 33 23:22:19 23:22:19 1 none none:none
ASM:Graph
none:none
none|none
FSG|
none|none none
lines=92
none none
trace
none

2949152a24
[Firefox: 6 hits: 07-02 to 08-15]
e07c29c4ae
[Firefox:592 hits: 06-19 to 10-08] none[none]
e07c29c4ae[1] WinXP 0 of 33 10:48:13 23:22:19 5 none none:none
ASM:Graph
none|none
FSG| 48% none
lines=92 none
trace

b62fa10cc4
NEW none[none] WinXP 34 of 36 14:18:44 14:18:44 1 none none:none
none|none none none

eca9a5fa95
[Firefox:42 hits: 08-09 to 10-08] none[none] WinXP 36 of 36 09:33:57 09:36:29 2 none none:none
none|none none none

0b951c2832
[Firefox: 3 hits: 08-19 to 10-03] none[none] WinXP 32 of 36 02:09:49 02:09:49 1 none none:none
none|none none none

5531ef78c6
NEW none[none] WinXP 34 of 36 14:08:11 14:08:11 1 none none:none
none|none none none

e6c448e3f3
NEW none[none] WinXP 32 of 33 12:28:35 12:28:35 1 none none:none
none|none none none

269540d8b6
[Firefox: 2 hits: 10-03 to 10-05]
9b272b04ec
[Firefox: 2 hits: 10-03 to 10-05] none[none]
none [none] Win2K-f 34 of 36 09:56:49 09:56:49 1 none none:none
none:none
none|none
none|none none
none none
none

21f85bf125
NEW none[none] WinXP 34 of 36 08:58:31 08:58:31 1 none none:none
none|none none none

57ce4acac2
[Firefox:249 hits: 06-17 to 10-08]
83f26f5044
[Firefox:26 hits: 06-20 to 10-08] 57ce4acac2 [1]
none [4] Win2K-f 29 of 32 15:32:25 15:32:25 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

7f60162c2c
[Firefox:702 hits: 12-31 to 10-08] 1aad8e4632 [0] WinXP 25 of 25 00:35:17 23:54:40 16 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

776985f561
[Firefox:17 hits: 06-24 to 09-30] 776985f561 [1] Win2K-f 31 of 33 22:47:00 22:47:00 1 none ASM:Graph
Armadillo| 47% lines=82 trace

ad728af44d
NEW none[none] WinXP 34 of 36 05:44:02 05:44:02 1 none none:none
none|none none none

6c8056d10c
NEW none[none] WinXP 35 of 36 04:59:19 04:59:19 1 none none:none
none|none none none

3e01fb69e1
[Firefox: 3 hits: 09-29 to 10-04]
6b997bcb17
[Firefox: 3 hits: 09-29 to 10-04]
d184a8ac3c
NEW none[none]
none [none]
none [none] WinXP 26 of 36 04:12:16 17:54:02 2 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

d61760f6a1
NEW none[none] WinXP 33 of 36 18:37:34 18:37:34 1 none none:none
none|none none none

6f64f9065d
NEW
fec2f7360e
NEW none[none]
none [none] Win2K-f 34 of 36 11:34:14 11:34:14 1 none none:none
none:none
none|none
none|none none
none none
none

b74e792974
[Firefox:11 hits: 06-18 to 09-30] b74e792974 [1] Win2K-f 31 of 33 14:23:43 14:23:43 1 none ASM:Graph
Armadillo| 47% lines=82 trace

1540ff87bb
NEW none[none] WinXP 35 of 36 13:17:24 13:17:24 1 none none:none
none|none none none

a2d4fbad48
NEW none[none] WinXP 35 of 36 07:32:24 12:05:19 2 none none:none
none|none none none

28f541b1b3
NEW none[none] WinXP 36 of 36 10:17:08 10:17:08 1 none none:none
none|none none none

71b183b0c8
[Firefox:18 hits: 09-17 to 10-08] none[none] WinXP 36 of 36 08:37:49 09:59:41 2 none none:none
none|none none none

fe12e0d1f8
NEW none[none] WinXP 35 of 36 13:53:09 13:53:09 1 none none:none
none|none none none

2587501592
NEW none[none] WinXP 0 of 36 08:57:00 08:57:00 1 none none:none
none|none none none

3ae357d17b
[Firefox:183 hits: 01-01 to 10-08] 462a7be171 [0] WinXP 29 of 29 18:48:53 18:48:53 1 none ASM:Graph
PolyEnE| 99% lines=73 trace

af41df7df9
NEW none[none] WinXP 35 of 36 07:48:27 07:48:27 1 none none:none
none|none none none

7f66e51c85
[Firefox:11 hits: 07-11 to 09-21] none[none] Win2K-f 32 of 33 06:52:04 06:52:04 1 none none:none
none|none none none

73ce2b74da
[Firefox:22 hits: 06-18 to 10-06]
79c01ec060
[Firefox:53 hits: 06-18 to 10-06] 73ce2b74da [1]
none [4] Win2K-f 33 of 33 15:00:57 15:00:57 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=81
none trace
trace

7d99b0e910
[Firefox:1281 hits: 12-31 to 10-08] 7a70e1b592 [0] WinXP 26 of 28 03:40:28 21:47:16 12 none ASM:Graph
PolyEnE| 99% lines=68 trace

7e8bfa9b49
[Firefox:10 hits: 10-01 to 10-08] none[none] WinXP 35 of 36 03:20:55 03:20:55 1 none none:none
none|none none none

03c06c736c
[Firefox: 4 hits: 10-04 to 10-06] none[none] WinXP 35 of 36 04:33:48 04:33:48 1 none none:none
none|none none none

776985f561
[Firefox:17 hits: 06-24 to 09-30]
8ec6129efe
[Firefox:16 hits: 06-24 to 09-30] 776985f561 [1]
none [4] Win2K-f 31 of 33 22:47:00 22:47:00 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

b74e792974
[Firefox:11 hits: 06-18 to 09-30]
f0e73c39a8
[Firefox:12 hits: 06-18 to 09-30] b74e792974 [1]
none [4] Win2K-f 31 of 33 14:23:43 14:23:43 1 none ASM:Graph
none:none
Armadillo|
tElock| lines=82
none trace
trace

0e40342969
NEW none[none] WinXP 34 of 36 15:19:00 15:19:00 1 none none:none
none|none none none

ab5e47bf8d
[Firefox:45 hits: 01-02 to 10-08] none[3] WinXP 29 of 29 09:54:25 09:54:25 1 none none:none
ASPack| none trace

09c3d90250
[Firefox:13 hits: 08-04 to 10-06] none[none] Win2K-f 32 of 36 03:12:34 03:12:34 1 none none:none
none|none none none

090753e602
NEW none[none] Win2K-f 32 of 36 18:26:11 18:26:11 1 none none:none
none|none none none

0b951c2832
[Firefox: 3 hits: 08-19 to 10-03]
e4ed4df0f0
[Firefox: 3 hits: 08-19 to 10-03] none[none]
none [none] WinXP 34 of 36 02:09:49 02:09:49 1 none none:none
none:none
none|none
none|none none
none none
none

3e01fb69e1
[Firefox: 3 hits: 09-29 to 10-04] none[none] WinXP 21 of 36 17:54:02 17:54:02 1 none none:none
none|none none none

475d9a7753
[Firefox: 7 hits: 06-22 to 10-05]
62abca87d8
NEW
e9a7fa27d5
[Firefox: 7 hits: 06-22 to 10-05] none[4]
none [none]
e9a7fa27d5[1] WinXP 30 of 32 05:55:02 21:09:41 2 none none:none
none:none
ASM:Graph
tElock|
none|none
Armadillo| 47% none
none
lines=82 trace
none
trace

08bdf1770f
NEW none[none] WinXP 34 of 36 06:41:49 06:41:49 1 none none:none
none|none none none