Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


11 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
6ec2a8994b
[Firefox:26 hits: 06-18 to 10-08]
857b781ca9
[Firefox:12 hits: 06-18 to 08-21]		 none[4]
857b781ca9[1]		 Win2K-f 29 of 33 00:51:17 00:51:17 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
da00a8e7a1
[Firefox:26 hits: 08-05 to 10-08]
f685f8e027
[Firefox:30 hits: 06-18 to 10-08]		 none[none]
f685f8e027[1]		 WinXP 28 of 33 01:41:23 01:41:23 1 none none:none
ASM:Graph
 none|none
Armadillo|		 48% none
lines=82		 none
trace
d2548a0bf5
[Firefox: 2 hits: 10-03 to 10-10]		 none[none] WinXP 35 of 36 02:19:17 02:19:17 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]
73f1082158
[Firefox:1507 hits: 06-18 to 10-10]		 none[4]
73f1082158[1]		 WinXP
Win2K-f		 0 of 32 00:34:32 21:25:51 13 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
6007d28092
[Firefox: 2 hits: 10-05 to 10-05]		 none[none] WinXP 35 of 36 01:52:23 01:52:23 1 none none:none
 none|none none none
c3bc53e727
[Firefox: 6 hits: 09-14 to 10-06]		 none[none] WinXP 33 of 36 01:12:55 01:12:55 1 none none:none
 none|none none none
1fcc146d70
[Firefox:53 hits: 01-02 to 10-06]		 258fafe892 [0] WinXP 29 of 29 21:00:43 23:53:46 2 none ASM:Graph
 PolyEnE| 99% lines=68 trace
5a6eafb317
NEW		 none[none] WinXP 35 of 36 04:58:03 04:58:03 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]		 none[4] Win2K-f
WinXP		 33 of 33 00:05:14 23:22:44 41 none none:none
 tElock| none trace
2dab138760
NEW		 none[none] WinXP 34 of 36 08:42:36 08:42:36 1 none none:none
 none|none none none
459aaba321
NEW		 none[none] WinXP 35 of 36 22:48:08 22:48:08 1 none none:none
 none|none none none
0115338c8b
[Firefox:11 hits: 09-12 to 10-10]		 none[none] Win2K-f
WinXP		 33 of 36 09:34:47 19:45:54 4 none none:none
 none|none none none
7ca2287333
NEW		 none[none] Win2K-f 35 of 36 22:46:19 22:46:19 1 none none:none
 none|none none none
cef69319c0
NEW		 none[none] WinXP 34 of 36 13:39:04 13:39:04 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]
b7082104e4
[Firefox:190 hits: 06-18 to 10-10]		 none[4]
none [4]		 WinXP
Win2K-f		 8 of 33 11:52:49 23:22:44 4 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
3cab74a67c
NEW		 none[none] WinXP 26 of 36 09:46:55 09:46:55 1 none none:none
 none|none none none
023977790d
NEW		 none[none] WinXP 32 of 36 08:17:58 08:17:58 1 none none:none
 none|none none none
6672dcb81a
[Firefox: 4 hits: 10-04 to 10-10]		 none[none] WinXP 36 of 36 23:41:24 23:41:24 1 none none:none
 none|none none none
a69c44e9c1
NEW		 none[none] Win2K-f 32 of 36 19:44:14 19:44:14 1 none none:none
 none|none none none
c2a03dfdd5
[Firefox: 2 hits: 10-08 to 10-08]		 none[none] WinXP 34 of 36 22:58:14 22:58:14 1 none none:none
 none|none none none
cce8ebff69
NEW		 none[none] WinXP 35 of 36 21:35:48 21:35:48 1 none none:none
 none|none none none
064eab6049
NEW		 none[none] WinXP 28 of 36 15:17:02 15:17:02 1 none none:none
 none|none none none
7dc7a28625
NEW		 none[none] WinXP 35 of 36 07:15:23 07:15:23 1 none none:none
 none|none none none
168aab35a3
[Firefox:160 hits: 06-17 to 10-09]		 none[4] WinXP
Win2K-f		 31 of 33 01:52:21 09:56:13 3 none none:none
 tElock| none trace
0e5f51ee8e
NEW		 none[none] WinXP 33 of 36 02:35:08 02:35:08 1 none none:none
 none|none none none
c5dee159d0
NEW		 none[none] Win2K-f 5 of 36 19:09:40 19:09:40 1 none none:none
 none|none none none
684ce96814
NEW		 none[none] Win2K-f 32 of 36 12:03:27 12:03:27 1 none none:none
 none|none none none
6f191934bb
NEW		 none[none] WinXP 34 of 36 11:06:50 11:06:50 1 none none:none
 none|none none none
a12cab51ef
[Firefox:571 hits: 01-01 to 10-10]		 40f7f463c4 [0] WinXP 29 of 29 10:04:43 16:05:44 6 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
ed3b7c84c6
NEW		 none[none] WinXP 34 of 36 06:55:37 06:55:37 1 none none:none
 none|none none none
3a0b35b15c
NEW		 none[none] WinXP 34 of 36 17:16:31 17:16:31 1 none none:none
 none|none none none
684ce96814
NEW
d8fa4e1826
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 12:03:27 12:03:27 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
70ec75ed62
NEW
fa32be2706
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 07:33:07 07:36:20 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
c392067a90
[Firefox: 2 hits: 10-06 to 10-08]		 none[none] WinXP 35 of 36 01:25:18 10:10:32 2 none none:none
 none|none none none
d8504764fb
NEW		 none[none] WinXP 33 of 35 21:32:20 21:32:20 1 none none:none
 none|none none none
0f7b6b4c31
[Firefox: 7 hits: 08-09 to 10-02]		 none[none] WinXP 34 of 36 01:52:21 01:52:21 1 none none:none
 none|none none none
bf9f26628c
NEW		 none[none] WinXP 35 of 36 20:11:06 20:11:06 1 none none:none
 none|none none none
97afa4f2dc
NEW		 none[none] WinXP 34 of 36 10:16:25 10:16:25 1 none none:none
 none|none none none
6c8c9e1079
NEW		 none[none] WinXP 0 of 36 11:46:04 11:46:04 1 none none:none
 none|none none none
119cdb01eb
NEW		 none[none] Win2K-f 33 of 36 07:43:49 07:43:49 1 none none:none
 none|none none none
0008f45bb2
NEW		 none[none] WinXP 0 of 36 13:19:58 13:19:58 1 none none:none
 none|none none none
741e3b03b3
[Firefox:457 hits: 01-05 to 10-10]		 e0197e8a64 [0] WinXP 31 of 32 09:09:40 23:46:23 2 none ASM:Graph
 none|none 100% lines=62 trace
29ae13a587
NEW		 none[none] Win2K-f 33 of 36 11:19:21 11:19:21 1 none none:none
 none|none none none
168aab35a3
[Firefox:160 hits: 06-17 to 10-09]
bba5ec5f4d
[Firefox: 5 hits: 09-22 to 10-07]		 none[4]
none [none]		 WinXP 0 of 0 09:56:13 09:56:13 1 none none:none
none:none
 tElock|
none|none		 none
none		 trace
none
831f4ee0a7
[Firefox:598 hits: 01-01 to 10-10]		 eb7546c600 [0] WinXP 29 of 29 01:40:04 06:35:47 4 none ASM:Graph
 none|none 100% lines=61 trace
36a87a6379
NEW		 none[none] WinXP 33 of 33 19:09:59 19:09:59 1 none none:none
 none|none none none
eec7cce07c
[Firefox:11 hits: 08-15 to 10-10]		 none[none] WinXP 29 of 29 16:13:17 16:13:17 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]
b5919931fe
[Firefox:819 hits: 06-20 to 10-10]		 none[4]
b5919931fe[1]		 Win2K-f 0 of 32 04:26:02 22:09:57 8 none none:none
ASM:Graph
 tElock|
ASProtect|		 48% none
lines=90		 trace
trace
0115338c8b
[Firefox:11 hits: 09-12 to 10-10]
321f4fc27d
[Firefox:11 hits: 09-12 to 10-10]		 none[none]
none [none]		 Win2K-f
WinXP		 31 of 36 09:34:47 19:45:54 4 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]
57ce4acac2
[Firefox:257 hits: 06-17 to 10-10]		 none[4]
57ce4acac2[1]		 Win2K-f
WinXP		 0 of 33 02:46:25 14:20:57 4 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
5cde984178
NEW		 none[none] Win2K-f 20 of 36 15:04:47 15:04:47 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:461 hits: 12-31 to 10-10]		 048df78048 [0] WinXP 29 of 29 15:02:39 15:51:40 2 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:3061 hits: 06-17 to 10-10]
a08f3b74a4
[Firefox:1084 hits: 06-18 to 10-10]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:05:14 22:42:44 20 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
901f291f72
NEW		 none[none] WinXP 35 of 36 10:42:21 10:42:21 1 none none:none
 none|none none none
a0139d7ad8
[Firefox:157 hits: 01-03 to 10-10]		 d9e9662db1 [0] WinXP 29 of 29 09:00:55 20:23:44 4 none ASM:Graph
 PolyEnE| 99% lines=68 trace
ba6f48b79a
[Firefox: 6 hits: 09-15 to 09-20]		 none[none] WinXP 34 of 36 13:10:29 23:25:02 3 none none:none
 none|none none none
a69c44e9c1
NEW
ed8c5b58eb
NEW		 none[none]
none [none]		 Win2K-f 34 of 36 19:44:14 19:44:14 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
2d76ff4e53
[Firefox: 9 hits: 07-23 to 09-15]		 none[none] WinXP 34 of 35 20:16:57 20:16:57 1 none none:none
 none|none none none
5cde984178
NEW
bdfb6cedff
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 15:04:47 15:04:47 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
70ec75ed62
NEW		 none[none] Win2K-f 35 of 36 07:33:07 07:36:20 2 none none:none
 none|none none none
6ec2a8994b
[Firefox:26 hits: 06-18 to 10-08]		 none[4] Win2K-f 30 of 33 00:51:17 00:51:17 1 none none:none
 tElock| none trace
3908fc49e2
NEW
df17a625ee
[Firefox:270 hits: 01-01 to 10-08]		 none[none]
9bbdd086c5[0]		 WinXP 29 of 29 02:08:37 07:30:55 2 none none:none
ASM:Graph
 none|none
ASPack|		 49% none
lines=186
embedded dns		 none
trace
ae18a31dca
NEW		 none[none] WinXP 35 of 36 19:14:43 19:14:43 1 none none:none
 none|none none none
ebacac9b67
NEW		 none[none] WinXP 34 of 35 11:04:46 11:04:46 1 none none:none
 none|none none none
986b59708d
[Firefox:100 hits: 01-14 to 10-10]		 8a00217866 [0] WinXP 29 of 29 17:20:44 17:20:44 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
e4baeefcc1
NEW		 none[none] WinXP 35 of 36 09:23:04 09:23:04 1 none none:none
 none|none none none
96d089e522
[Firefox: 2 hits: 10-08 to 10-08]		 none[none] WinXP 34 of 36 07:48:48 07:48:48 1 none none:none
 none|none none none
308fe7e750
NEW		 none[none] WinXP 34 of 36 02:34:49 02:34:49 1 none none:none
 none|none none none
7ca2287333
NEW
95ccd6eb89
NEW		 none[none]
none [none]		 Win2K-f 32 of 36 22:46:19 22:46:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b2ecec60ba
NEW		 none[none] WinXP 36 of 36 12:14:46 12:14:46 1 none none:none
 none|none none none
0115338c8b
[Firefox:11 hits: 09-12 to 10-10]
321f4fc27d
[Firefox:11 hits: 09-12 to 10-10]
e07c29c4ae
[Firefox:608 hits: 06-19 to 10-10]		 none[none]
none [none]
e07c29c4ae[1]		 WinXP 0 of 33 02:32:29 16:58:03 6 none none:none
none:none
ASM:Graph
 none|none
none|none
FSG|		 48% none
none
lines=92		 none
none
trace
0f7b6b4c31
[Firefox: 7 hits: 08-09 to 10-02]
168aab35a3
[Firefox:160 hits: 06-17 to 10-09]
af0ab107a9
NEW		 none[none]
none [4]
none [none]		 WinXP 0 of 36 01:52:21 01:52:21 1 none none:none
none:none
none:none
 none|none
tElock|
none|none		 none
none
none		 none
trace
none
ca47a36342
[Firefox:17 hits: 02-16 to 10-10]		 c3a58f69c6 [0] WinXP 26 of 28 12:15:09 12:15:09 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
0b951c2832
[Firefox: 4 hits: 08-19 to 10-09]		 none[none] WinXP 32 of 36 23:15:28 23:15:28 1 none none:none
 none|none none none
3cd7958258
[Firefox:31 hits: 06-17 to 10-08]		 none[4] WinXP 30 of 33 17:40:55 17:40:55 1 none none:none
 tElock| none trace
7f60162c2c
[Firefox:725 hits: 12-31 to 10-10]		 1aad8e4632 [0] WinXP 25 of 25 06:26:30 23:11:40 6 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
042774a2b7
[Firefox:35 hits: 01-14 to 08-19]		 1c9a472cd7 [0] WinXP 29 of 29 16:19:41 16:19:41 1 none ASM:Graph
 PolyEnE| 0% lines=71
embedded dns		 trace
d8a437c6bc
NEW		 none[none] WinXP 35 of 36 05:15:28 05:15:28 1 none none:none
 none|none none none
2d815d2be3
[Firefox: 2 hits: 09-25 to 10-07]		 none[none] WinXP 34 of 36 14:35:17 14:35:17 1 none none:none
 none|none none none
7dc092bcbd
NEW		 none[none] WinXP 34 of 36 14:24:32 14:24:32 1 none none:none
 none|none none none
6c8c9e1079
NEW
a12cab51ef
[Firefox:571 hits: 01-01 to 10-10]
af3c70331c
NEW		 none[none]
40f7f463c4[0]
none [none]		 WinXP 0 of 36 11:46:04 11:46:04 1 none none:none
ASM:Graph
none:none
 none|none
ASPack|
none|none		 none
lines=281
embedded dns
none		 none
trace
none
632e315db2
[Firefox: 3 hits: 10-03 to 10-05]		 none[none] WinXP 35 of 36 02:27:43 23:48:37 4 none none:none
 none|none none none
75347e3aaf
NEW		 none[none] WinXP 34 of 35 10:00:30 10:00:30 1 none none:none
 none|none none none
3cd7958258
[Firefox:31 hits: 06-17 to 10-08]
41efedf70f
[Firefox:30 hits: 06-19 to 10-08]		 none[4]
41efedf70f[1]		 WinXP 28 of 32 17:40:55 17:40:55 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
71b183b0c8
[Firefox:20 hits: 09-17 to 10-09]		 none[none] WinXP 36 of 36 10:01:33 10:01:33 1 none none:none
 none|none none none
f9d832dfd2
[Firefox: 4 hits: 09-22 to 10-10]		 none[none] WinXP 0 of 0 10:59:02 10:59:02 1 none none:none
 none|none none none
73d46aecd2
NEW		 none[none] WinXP 35 of 36 12:47:09 12:47:09 1 none none:none
 none|none none none
3ae357d17b
[Firefox:184 hits: 01-01 to 10-09]		 462a7be171 [0] WinXP 29 of 29 19:54:38 19:54:38 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
da00a8e7a1
[Firefox:26 hits: 08-05 to 10-08]		 none[none] WinXP 34 of 36 01:41:23 01:41:23 1 none none:none
 none|none none none
4d4dfbf5fe
NEW		 none[none] WinXP 34 of 36 21:51:24 21:51:24 1 none none:none
 none|none none none
2d76ff4e53
[Firefox: 9 hits: 07-23 to 09-15]
7df1377ee3
[Firefox: 9 hits: 07-23 to 09-15]		 none[none]
none [none]		 WinXP 32 of 35 20:16:57 20:16:57 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1306 hits: 12-31 to 10-10]		 7a70e1b592 [0] WinXP 26 of 28 11:35:00 16:23:02 3 none ASM:Graph
 PolyEnE| 99% lines=68 trace
d48af65152
NEW		 none[none] WinXP 35 of 36 22:37:15 22:37:15 1 none none:none
 none|none none none
4f1299acc0
NEW		 none[none] WinXP 34 of 36 08:13:20 18:35:38 2 none none:none
 none|none none none
1509c8d024
[Firefox:37 hits: 06-17 to 10-07]
b5919931fe
[Firefox:819 hits: 06-20 to 10-10]
f23b040440
[Firefox:25 hits: 06-22 to 10-07]		 none[4]
b5919931fe[1]
f23b040440[1]		 Win2K-f 30 of 32 14:52:01 14:52:01 1 none none:none
ASM:Graph
ASM:Graph
 tElock|
ASProtect|
Armadillo|		 47% none
lines=90
lines=82		 trace
trace
trace
168aab35a3
[Firefox:160 hits: 06-17 to 10-09]
61426996c3
[Firefox:12 hits: 06-20 to 09-26]		 none[4]
61426996c3[1]		 Win2K-f 29 of 32 04:26:02 04:26:02 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=82		 trace
trace
2da45485fe
NEW		 none[none] WinXP 34 of 36 14:51:37 14:51:37 1 none none:none
 none|none none none
3908fc49e2
NEW		 none[none] WinXP 0 of 35 07:30:55 07:30:55 1 none none:none
 none|none none none
1509c8d024
[Firefox:37 hits: 06-17 to 10-07]		 none[4] Win2K-f 31 of 33 14:52:01 14:52:01 1 none none:none
 tElock| none trace
cdf8cd94a9
[Firefox:21 hits: 09-14 to 10-10]		 none[none] WinXP 35 of 36 09:13:04 09:13:04 1 none none:none
 none|none none none
0b951c2832
[Firefox: 4 hits: 08-19 to 10-09]
e4ed4df0f0
[Firefox: 4 hits: 08-19 to 10-09]		 none[none]
none [none]		 WinXP 34 of 36 23:15:28 23:15:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4e9b8386a8
NEW		 none[none] WinXP 27 of 36 17:12:11 17:12:11 1 none none:none
 none|none none none
55f1288a7a
[Firefox: 3 hits: 07-25 to 07-30]		 none[none] WinXP 35 of 35 13:22:57 22:22:41 2 none none:none
 none|none none none