Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

12 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

9c037c69f6
[Firefox: 5 hits: 04-21 to 09-25] none[3] WinXP 27 of 32 19:47:18 19:47:18 1 none none:none
ASPack| none trace

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
73f1082158
[Firefox:1520 hits: 06-18 to 10-11] none[4]
73f1082158[1] Win2K-f
WinXP 0 of 32 01:57:03 23:35:34 11 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

28ce5fc467
[Firefox: 5 hits: 09-12 to 09-28]
e7335cb667
[Firefox: 5 hits: 09-12 to 09-28] none[none]
none [none] Win2K-f 33 of 36 00:15:15 00:15:15 1 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11] none[4] Win2K-f
WinXP 33 of 33 00:56:25 23:35:34 33 none none:none
tElock| none trace

7756bb9dce
NEW none[none] WinXP 35 of 36 16:19:31 16:19:31 1 none none:none
none|none none none

dca47dd84c
NEW none[none] WinXP 33 of 35 20:30:32 20:30:32 1 none none:none
none|none none none

1fdecc3416
NEW none[none] WinXP 33 of 36 10:25:58 10:25:58 1 none none:none
none|none none none

e8243a9ee6
NEW
f057d47965
NEW none[none]
none [none] WinXP 31 of 36 07:32:01 07:32:01 1 none none:none
none:none
none|none
none|none none
none none
none

f359170eec
NEW none[none] WinXP 35 of 36 23:26:21 23:29:32 2 none none:none
none|none none none

7f89b38665
[Firefox:24 hits: 08-02 to 10-09] none[none] Win2K-f 32 of 36 23:22:46 23:22:46 1 none none:none
none|none none none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
b7082104e4
[Firefox:194 hits: 06-18 to 10-11] none[4]
none [4] Win2K-f
WinXP 8 of 33 13:22:13 21:24:16 2 none none:none
none:none
tElock|
tElock| none
none trace
trace

e8243a9ee6
NEW none[none] WinXP 34 of 36 07:32:01 07:32:01 1 none none:none
none|none none none

152f4c79b5
NEW none[none] WinXP 35 of 36 07:02:58 07:02:58 1 none none:none
none|none none none

214bc429e1
[Firefox: 4 hits: 09-25 to 10-04] none[none] Win2K-f 34 of 36 04:44:15 04:44:15 1 none none:none
none|none none none

03d5bf43b7
[Firefox: 2 hits: 09-18 to 10-10] none[none] Win2K-f 19 of 36 21:21:46 21:21:46 1 none none:none
none|none none none

f737d0aa63
NEW none[none] WinXP 35 of 36 10:40:12 10:40:12 1 none none:none
none|none none none

2e04b06527
[Firefox:12 hits: 06-18 to 10-04]
5c054291de
[Firefox: 9 hits: 06-18 to 09-29] none[4]
5c054291de[1] Win2K-f 30 of 33 02:46:26 02:46:26 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

a5321e6292
NEW none[none] WinXP 35 of 36 13:43:17 13:43:17 1 none none:none
none|none none none

745a3728fa
NEW none[none] WinXP 34 of 36 03:30:24 03:30:24 1 none none:none
none|none none none

7dc7a28625
[Firefox: 2 hits: 10-05 to 10-11] none[none] WinXP 35 of 36 05:42:23 05:42:23 1 none none:none
none|none none none

168aab35a3
[Firefox:163 hits: 06-17 to 10-11] none[4] Win2K-f 31 of 33 01:33:00 01:33:00 1 none none:none
tElock| none trace

533d15b5ce
[Firefox:32 hits: 06-21 to 10-10] none[4] WinXP 30 of 33 22:20:18 22:20:18 1 none none:none
tElock| none trace

b5919931fe
[Firefox:827 hits: 06-20 to 10-11]
bca9e0fb5f
[Firefox:35 hits: 06-18 to 10-05] b5919931fe [1]
none [4] Win2K-f 31 of 32 18:29:27 18:29:27 1 none ASM:Graph
none:none
ASProtect|
PolyEnE| lines=90
none trace
trace

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
b6cf789b7d
[Firefox: 5 hits: 07-22 to 10-03] none[4]
none [none] WinXP 25 of 34 16:20:45 16:20:45 1 none none:none
none:none
tElock|
none|none none
none trace
none

f5ab9763ea
[Firefox: 4 hits: 10-03 to 10-09] none[none] WinXP 35 of 36 14:08:49 14:08:49 1 none none:none
none|none none none

03f912899b
[Firefox:162 hits: 01-08 to 10-10] 83893bd25d [0] WinXP 32 of 32 12:58:35 18:00:31 2 none ASM:Graph
none|none 100% lines=65 trace

168aab35a3
[Firefox:163 hits: 06-17 to 10-11]
4c3df24b32
[Firefox:218 hits: 06-17 to 10-10] none[4]
4c3df24b32[1] Win2K-f 0 of 33 01:33:00 01:33:00 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

03d5bf43b7
[Firefox: 2 hits: 09-18 to 10-10]
d3be2c7a88
NEW none[none]
none [none] Win2K-f 34 of 36 21:21:46 21:21:46 1 none none:none
none:none
none|none
none|none none
none none
none

119cdb01eb
NEW none[none] Win2K-f 33 of 36 19:45:20 19:45:20 1 none none:none
none|none none none

741e3b03b3
[Firefox:459 hits: 01-05 to 10-11] e0197e8a64 [0] WinXP 31 of 32 07:37:06 21:06:50 6 none ASM:Graph
none|none 100% lines=62 trace

f353d4eed9
[Firefox:32 hits: 09-17 to 10-09] none[none] WinXP 35 of 36 18:20:51 18:20:51 1 none none:none
none|none none none

2d6c8c447f
[Firefox:14 hits: 09-16 to 10-10] none[none] WinXP 36 of 36 17:01:30 21:59:13 3 none none:none
none|none none none

393d3a40db
[Firefox:10 hits: 02-14 to 10-06] 8a0ff8065a [0] WinXP 31 of 32 15:04:36 16:59:11 2 none ASM:Graph
PolyEnE| 0% lines=76 trace

f4bec53b23
NEW 3d33fb63a4 [0] WinXP 29 of 29 15:41:44 15:41:44 1 none ASM:Graph
PolyEnE| 99% lines=69 trace

831f4ee0a7
[Firefox:602 hits: 01-01 to 10-11] eb7546c600 [0] WinXP 29 of 29 12:01:35 14:57:17 2 none ASM:Graph
none|none 100% lines=61 trace

533d15b5ce
[Firefox:32 hits: 06-21 to 10-10]
58c343a8d8
[Firefox:36 hits: 06-21 to 10-10] none[4]
58c343a8d8[1] WinXP 28 of 33 22:20:18 22:20:18 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

75e371ac2c
NEW none[none] Win2K-f 34 of 36 22:16:26 22:16:26 1 none none:none
none|none none none

039e3fa376
[Firefox: 9 hits: 07-24 to 10-10]
76f2c59ef8
[Firefox: 9 hits: 07-24 to 10-10] none[none]
none [none] Win2K-f 31 of 35 01:46:11 01:46:11 1 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
73f1082158
[Firefox:1520 hits: 06-18 to 10-11]
b5919931fe
[Firefox:827 hits: 06-20 to 10-11] none[4]
73f1082158[1]
b5919931fe[1] Win2K-f 0 of 32 03:07:43 18:54:55 6 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=81
lines=90 trace
trace
trace

808b913443
NEW none[none] WinXP 35 of 36 19:45:14 19:45:38 2 none none:none
none|none none none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
57ce4acac2
[Firefox:261 hits: 06-17 to 10-11] none[4]
57ce4acac2[1] Win2K-f
WinXP 0 of 33 02:47:32 16:25:32 5 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

039e3fa376
[Firefox: 9 hits: 07-24 to 10-10] none[none] Win2K-f 33 of 35 01:46:11 01:46:11 1 none none:none
none|none none none

f88ae7c70a
NEW none[none] WinXP 34 of 36 01:43:55 01:43:55 1 none none:none
none|none none none

7a393628ea
[Firefox: 7 hits: 05-12 to 07-15] none[4] WinXP 30 of 32 13:16:51 13:16:51 1 none none:none
ASProtect| none trace

1a2c0e6130
[Firefox:463 hits: 12-31 to 10-11] 048df78048 [0] WinXP 29 of 29 10:03:18 15:29:51 2 none ASM:Graph
none|none 100% lines=61 trace

63fac3c3d2
NEW none[none] WinXP 32 of 36 09:24:21 09:24:21 1 none none:none
none|none none none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
a08f3b74a4
[Firefox:1104 hits: 06-18 to 10-11] none[4]
a08f3b74a4[1] Win2K-f
WinXP 0 of 33 00:56:25 22:41:08 15 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

8fa4d465cc
NEW none[none] WinXP 33 of 36 05:27:07 05:27:07 1 none none:none
none|none none none

92c8e458d8
[Firefox: 6 hits: 02-24 to 10-02] 4ba645ac3a [0] WinXP 32 of 32 18:33:52 18:33:52 1 none ASM:Graph
none|none 100% lines=62 trace

b872c76081
[Firefox:56 hits: 09-13 to 10-09] none[none] WinXP 36 of 36 12:13:25 13:23:26 2 none none:none
none|none none none

18c7040ea0
[Firefox: 3 hits: 09-15 to 10-09] none[none] WinXP 34 of 36 07:02:47 07:02:47 1 none none:none
none|none none none

7f89b38665
[Firefox:24 hits: 08-02 to 10-09]
a51a50404e
[Firefox:24 hits: 08-02 to 10-09] none[none]
none [none] Win2K-f 34 of 36 23:22:46 23:22:46 1 none none:none
none:none
none|none
none|none none
none none
none

67b04ef0c9
NEW none[none] WinXP 35 of 36 13:53:43 13:53:43 1 none none:none
none|none none none

6ea2758c07
NEW none[none] Win2K-f 34 of 36 00:47:19 00:47:19 1 none none:none
none|none none none

09c3d90250
[Firefox:14 hits: 08-04 to 10-09]
8db2b2d9ab
NEW
8f34a39070
[Firefox:14 hits: 08-04 to 10-09] none[none]
none [none]
none [none] WinXP 34 of 36 13:23:21 13:23:21 1 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

95cb430c7f
NEW none[none] WinXP 35 of 36 07:31:02 07:31:02 1 none none:none
none|none none none

caf7b0fa3d
NEW none[none] WinXP 33 of 36 14:47:22 14:47:22 1 none none:none
none|none none none

1fdecc3416
NEW
68c7a1f625
[Firefox: 4 hits: 09-14 to 10-04] none[none]
none [none] WinXP 35 of 36 10:25:58 10:25:58 1 none none:none
none:none
none|none
none|none none
none none
none

a0139d7ad8
[Firefox:161 hits: 01-03 to 10-11] d9e9662db1 [0] WinXP 29 of 29 07:11:10 07:11:10 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

ba6f48b79a
[Firefox: 9 hits: 09-15 to 10-11] none[none] WinXP 34 of 36 12:42:15 12:42:15 1 none none:none
none|none none none

12e484a198
[Firefox: 5 hits: 10-01 to 10-05] none[none] Win2K-f 32 of 36 13:00:42 13:00:42 1 none none:none
none|none none none

f1d556bf4b
[Firefox: 4 hits: 10-05 to 10-10] none[none] WinXP 33 of 36 07:47:32 08:56:38 2 none none:none
none|none none none

16874933ea
[Firefox:52 hits: 06-18 to 10-09]
76ee340669
[Firefox:52 hits: 06-18 to 10-09] 16874933ea [1]
none [4] WinXP 33 of 33 15:47:37 15:47:37 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

c794fb9f91
NEW none[none] WinXP 35 of 36 09:03:53 09:04:17 2 none none:none
none|none none none

4515dee6bc
NEW none[none] WinXP 34 of 36 05:42:19 05:42:19 1 none none:none
none|none none none

df17a625ee
[Firefox:272 hits: 01-01 to 10-11] 9bbdd086c5 [0] WinXP 29 of 29 15:04:58 15:04:58 1 none ASM:Graph
ASPack| 49% lines=186
embedded dns trace

986b59708d
[Firefox:101 hits: 01-14 to 10-11] 8a00217866 [0] WinXP 29 of 29 13:23:48 13:59:52 2 none ASM:Graph
PolyEnE| 100% lines=57 trace

c05385e600
[Firefox:23 hits: 01-20 to 10-10] 6a383b021d [0] WinXP 29 of 29 04:36:59 04:36:59 1 none ASM:Graph
PolyEnE| 99% lines=68 trace

e4baeefcc1
[Firefox: 2 hits: 10-09 to 10-11] none[none] WinXP 35 of 36 10:47:04 10:47:36 2 none none:none
none|none none none

1f59c01aef
[Firefox:11 hits: 08-01 to 10-09] none[none] Win2K-f 34 of 36 18:45:07 18:45:07 1 none none:none
none|none none none

12e484a198
[Firefox: 5 hits: 10-01 to 10-05]
2e43dc0077
[Firefox: 6 hits: 10-01 to 10-08] none[none]
none [none] Win2K-f 34 of 36 13:00:42 13:00:42 1 none none:none
none:none
none|none
none|none none
none none
none

1f59c01aef
[Firefox:11 hits: 08-01 to 10-09]
dc92683d9a
[Firefox:18 hits: 06-19 to 10-09] none[none]
dc92683d9a[1] Win2K-f 29 of 33 18:45:07 18:45:07 1 none none:none
ASM:Graph
none|none
Armadillo| 47% none
lines=82 none
trace

96d089e522
[Firefox: 3 hits: 10-08 to 10-11] none[none] WinXP 34 of 36 10:24:50 15:20:27 2 none none:none
none|none none none

f9e03b93bc
[Firefox: 3 hits: 10-09 to 10-10] none[none] WinXP 35 of 36 20:54:34 20:54:34 1 none none:none
none|none none none

b5919931fe
[Firefox:827 hits: 06-20 to 10-11]
bca9e0fb5f
[Firefox:35 hits: 06-18 to 10-05]
e53a9ea82e
[Firefox:35 hits: 06-18 to 10-05] b5919931fe [1]
none [4]
e53a9ea82e[1] Win2K-f 23 of 33 18:29:27 18:29:27 1 none ASM:Graph
none:none
ASM:Graph
ASProtect|
PolyEnE|
Armadillo| 47% lines=90
none
lines=81 trace
trace
trace

16874933ea
[Firefox:52 hits: 06-18 to 10-09] 16874933ea [1] WinXP 29 of 33 15:47:37 15:47:37 1 none ASM:Graph
Armadillo| 48% lines=82 trace

28ce5fc467
[Firefox: 5 hits: 09-12 to 09-28] none[none] Win2K-f 31 of 36 00:15:15 00:15:15 1 none none:none
none|none none none

53bfe15e91
[Firefox:3102 hits: 06-17 to 10-11]
a08f3b74a4
[Firefox:1104 hits: 06-18 to 10-11]
e07c29c4ae
[Firefox:614 hits: 06-19 to 10-11] none[4]
a08f3b74a4[1]
e07c29c4ae[1] WinXP 0 of 33 02:57:26 16:44:07 5 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

ca47a36342
[Firefox:18 hits: 02-16 to 10-11] c3a58f69c6 [0] WinXP 26 of 28 17:08:23 17:36:40 2 none ASM:Graph
PolyEnE| 100% lines=89
embedded dns trace

0b951c2832
[Firefox: 5 hits: 08-19 to 10-11] none[none] WinXP 32 of 36 04:23:16 04:23:16 1 none none:none
none|none none none

fd8676780d
NEW none[none] WinXP 34 of 36 04:27:08 04:27:08 1 none none:none
none|none none none

6e2eaa0359
[Firefox:16 hits: 07-10 to 10-07]
740e3bffe0
[Firefox:17 hits: 06-25 to 10-07] none[none]
none [none] Win2K-f 24 of 33 07:15:00 07:15:00 1 none none:none
none:none
none|none
none|none none
none none
none

a43ad8c21e
[Firefox: 2 hits: 10-06 to 10-08] none[none] WinXP 34 of 36 05:11:11 05:11:13 2 none none:none
none|none none none

49d6cdaab4
[Firefox: 9 hits: 09-13 to 10-10] none[none] WinXP 34 of 36 08:45:58 08:45:58 1 none none:none
none|none none none

821f57b5c5
NEW none[none] WinXP 35 of 36 07:26:48 19:23:00 2 none none:none
none|none none none

c26fc3c9a3
[Firefox: 3 hits: 09-21 to 09-23] none[none] WinXP 36 of 36 06:25:53 11:18:19 2 none none:none
none|none none none

7f60162c2c
[Firefox:731 hits: 12-31 to 10-11] 1aad8e4632 [0] WinXP 25 of 25 00:24:25 06:24:20 5 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

6e2eaa0359
[Firefox:16 hits: 07-10 to 10-07] none[none] Win2K-f 31 of 33 07:15:00 07:15:00 1 none none:none
none|none none none

09c3d90250
[Firefox:14 hits: 08-04 to 10-09]
8db2b2d9ab
NEW none[none]
none [none] WinXP 8 of 35 10:25:58 13:23:21 2 none none:none
none:none
none|none
none|none none
none none
none

6c8056d10c
NEW none[none] WinXP 35 of 36 10:37:37 10:37:37 1 none none:none
none|none none none

0c803048e4
[Firefox: 2 hits: 07-26 to 07-29] none[none] WinXP 35 of 35 20:25:25 20:25:25 1 none none:none
none|none none none

71b183b0c8
[Firefox:21 hits: 09-17 to 10-11] none[none] WinXP 36 of 36 17:57:42 17:57:42 1 none none:none
none|none none none

76fd267924
NEW none[none] WinXP 34 of 35 09:47:54 09:47:54 1 none none:none
none|none none none

d526bf5a3f
NEW none[none] WinXP 35 of 36 10:20:10 10:20:15 2 none none:none
none|none none none

a219ed3aeb
[Firefox:27 hits: 08-02 to 10-07] none[none] WinXP 36 of 36 14:39:55 14:39:55 1 none none:none
none|none none none

7d99b0e910
[Firefox:1309 hits: 12-31 to 10-11] 7a70e1b592 [0] WinXP 26 of 28 09:43:50 22:55:25 3 none ASM:Graph
PolyEnE| 99% lines=68 trace

eda98e1cd6
[Firefox: 2 hits: 10-03 to 10-03] none[none] WinXP 35 of 36 09:08:57 09:08:57 1 none none:none
none|none none none

7e8bfa9b49
[Firefox:13 hits: 10-01 to 10-10] none[none] WinXP 35 of 36 14:24:49 19:05:59 2 none none:none
none|none none none

03c06c736c
[Firefox: 5 hits: 10-04 to 10-09] none[none] WinXP 35 of 36 03:05:44 03:05:44 1 none none:none
none|none none none

214bc429e1
[Firefox: 4 hits: 09-25 to 10-04]
9ad48d782a
[Firefox: 4 hits: 09-25 to 10-04] none[none]
none [none] Win2K-f 32 of 36 04:44:15 04:44:15 1 none none:none
none:none
none|none
none|none none
none none
none

5ee0ac41ba
NEW none[none] WinXP 34 of 36 09:37:57 09:37:57 1 none none:none
none|none none none

ae67cf2b10
NEW none[none] WinXP 35 of 36 16:55:40 16:55:40 1 none none:none
none|none none none

c0e2e2d5ee
NEW none[none] WinXP 35 of 36 10:56:11 10:56:11 1 none none:none
none|none none none

09c3d90250
[Firefox:14 hits: 08-04 to 10-09] none[none] WinXP 32 of 36 13:23:21 13:23:21 1 none none:none
none|none none none

2e04b06527
[Firefox:12 hits: 06-18 to 10-04] none[4] Win2K-f 30 of 33 02:46:26 02:46:26 1 none none:none
tElock| none trace

75ee1e48c8
NEW none[none] WinXP 35 of 36 06:33:28 06:34:16 2 none none:none
none|none none none

0b951c2832
[Firefox: 5 hits: 08-19 to 10-11]
e4ed4df0f0
[Firefox: 5 hits: 08-19 to 10-11] none[none]
none [none] WinXP 34 of 36 04:23:16 04:23:16 1 none none:none
none:none
none|none
none|none none
none none
none

55da8b037d
NEW none[none] WinXP 36 of 36 09:19:01 09:19:01 1 none none:none
none|none none none

6ea2758c07
NEW
d4406c307b
NEW none[none]
none [none] Win2K-f 33 of 36 00:47:19 00:47:19 1 none none:none
none:none
none|none
none|none none
none none
none

69d773e78a
[Firefox: 3 hits: 09-28 to 10-08] none[none] WinXP 35 of 36 18:53:01 18:53:01 1 none none:none
none|none none none