Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


13 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
2e59221683
NEW		 none[none] WinXP 0 of 0 12:32:06 12:32:06 1 none none:none
 none|none none none
1cd89685c0
NEW		 none[none] WinXP 35 of 36 17:47:53 17:47:53 1 none none:none
 none|none none none
d2548a0bf5
[Firefox: 3 hits: 10-03 to 10-11]		 none[none] WinXP 35 of 36 04:58:37 04:58:37 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
73f1082158
[Firefox:1531 hits: 06-18 to 10-12]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 01:41:06 22:54:13 16 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
0256a5a5ce
NEW		 none[none] WinXP 0 of 0 02:15:50 02:15:50 1 none none:none
 none|none none none
a2480be3f3
NEW		 none[none] WinXP 34 of 36 23:07:07 23:07:07 1 none none:none
 none|none none none
1fcc146d70
[Firefox:55 hits: 01-02 to 10-11]		 258fafe892 [0] WinXP 29 of 29 17:15:33 17:15:33 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]		 none[4] WinXP
Win2K-f		 33 of 33 01:12:00 23:50:24 37 none none:none
 tElock| none trace
342d138afd
NEW		 none[none] Win2K-f
WinXP		 34 of 36 01:10:22 12:14:57 2 none none:none
 none|none none none
7f89b38665
[Firefox:25 hits: 08-02 to 10-12]		 none[none] Win2K-f 32 of 36 12:57:19 12:57:19 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
b5919931fe
[Firefox:833 hits: 06-20 to 10-12]
b7082104e4
[Firefox:196 hits: 06-18 to 10-12]		 none[4]
b5919931fe[1]
none [4]		 Win2K-f
WinXP		 8 of 33 07:44:12 23:50:24 5 none none:none
ASM:Graph
none:none
 tElock|
ASProtect|
tElock|		 none
lines=90
none		 trace
trace
trace
6672dcb81a
[Firefox: 5 hits: 10-04 to 10-11]		 none[none] WinXP 36 of 36 04:01:30 04:01:30 1 none none:none
 none|none none none
55d816f3e9
[Firefox: 4 hits: 09-20 to 09-25]		 none[none] WinXP 33 of 36 02:59:51 02:59:51 1 none none:none
 none|none none none
4e9a076b3a
NEW		 none[none] WinXP 0 of 0 19:27:53 19:27:53 1 none none:none
 none|none none none
226df4e471
NEW		 none[none] WinXP 36 of 36 04:29:54 04:29:54 1 none none:none
 none|none none none
8af04626fa
NEW
ac9e444ce0
NEW		 none[none]
none [none]		 WinXP
Win2K-f		 0 of 0 16:02:28 17:30:49 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
6ea2758c07
[Firefox: 2 hits: 10-07 to 10-12]
d2e0990a9d
[Firefox:12 hits: 10-06 to 10-07]		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 18 of 36 16:02:28 23:25:43 7 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
168aab35a3
[Firefox:164 hits: 06-17 to 10-12]		 none[4] Win2K-f 31 of 33 00:30:37 00:30:37 1 none none:none
 tElock| none trace
0e5f51ee8e
NEW		 none[none] WinXP 33 of 36 13:59:09 13:59:09 1 none none:none
 none|none none none
743e23a8fe
[Firefox: 5 hits: 10-07 to 10-07]		 none[none] WinXP 34 of 36 03:35:24 03:35:24 1 none none:none
 none|none none none
a12cab51ef
[Firefox:577 hits: 01-01 to 10-11]		 40f7f463c4 [0] WinXP 29 of 29 19:56:48 19:56:48 1 none ASM:Graph
 ASPack| 54% lines=281
embedded dns		 trace
370490ea31
NEW		 none[none] WinXP 35 of 36 09:09:46 09:09:46 1 none none:none
 none|none none none
d8f69db80b
NEW		 none[none] WinXP 35 of 36 07:57:03 07:57:03 1 none none:none
 none|none none none
40d8554b40
[Firefox: 2 hits: 10-07 to 10-07]
9018b01028
NEW		 none[none]
none [none]		 WinXP 15 of 36 16:02:28 16:02:28 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
f5ab9763ea
[Firefox: 5 hits: 10-03 to 10-12]		 none[none] WinXP 35 of 36 13:48:51 14:44:11 2 none none:none
 none|none none none
f665a37b6c
NEW		 none[none] WinXP 36 of 36 05:45:26 05:45:26 1 none none:none
 none|none none none
03f912899b
[Firefox:164 hits: 01-08 to 10-12]		 83893bd25d [0] WinXP 32 of 32 06:45:23 19:58:18 4 none ASM:Graph
 none|none 100% lines=65 trace
97afa4f2dc
NEW		 none[none] WinXP 34 of 36 11:22:32 11:22:48 2 none none:none
 none|none none none
55d816f3e9
[Firefox: 4 hits: 09-20 to 09-25]
84a24d85f7
[Firefox: 4 hits: 09-20 to 09-25]		 none[none]
none [none]		 WinXP 34 of 36 02:59:51 02:59:51 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
168aab35a3
[Firefox:164 hits: 06-17 to 10-12]
4c3df24b32
[Firefox:219 hits: 06-17 to 10-12]		 none[4]
4c3df24b32[1]		 Win2K-f 0 of 33 00:30:37 00:30:37 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
686d4ca67b
[Firefox: 9 hits: 07-08 to 10-01]
b5919931fe
[Firefox:833 hits: 06-20 to 10-12]
b7e379b157
[Firefox: 9 hits: 07-08 to 10-01]		 none[none]
none [none]
b5919931fe[1]
none [none]		 Win2K-f 29 of 33 20:34:46 20:34:46 1 none none:none
none:none
ASM:Graph
none:none
 none|none
none|none
ASProtect|
none|none		 none
none
lines=90
none		 none
none
trace
none
40d8554b40
[Firefox: 2 hits: 10-07 to 10-07]
9018b01028
NEW
ac9e444ce0
NEW
d2e0990a9d
[Firefox:12 hits: 10-06 to 10-07]
d3be2c7a88
[Firefox: 2 hits: 09-30 to 10-12]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP 34 of 36 16:02:28 16:02:28 1 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
05688324d2
NEW		 none[none] Win2K-f 0 of 0 17:13:04 17:13:04 1 none none:none
 none|none none none
741e3b03b3
[Firefox:465 hits: 01-05 to 10-12]		 e0197e8a64 [0] WinXP 31 of 32 01:43:05 17:59:51 3 none ASM:Graph
 none|none 100% lines=62 trace
2d6c8c447f
[Firefox:17 hits: 09-16 to 10-12]		 none[none] WinXP 36 of 36 17:53:39 17:53:39 1 none none:none
 none|none none none
8af04626fa
NEW		 none[none] Win2K-f 0 of 0 17:30:49 17:30:49 1 none none:none
 none|none none none
393d3a40db
[Firefox:12 hits: 02-14 to 10-12]		 8a0ff8065a [0] WinXP 31 of 32 12:44:12 12:44:12 1 none ASM:Graph
 PolyEnE| 0% lines=76 trace
831f4ee0a7
[Firefox:604 hits: 01-01 to 10-12]		 eb7546c600 [0] WinXP 29 of 29 15:30:55 15:30:55 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
b5919931fe
[Firefox:833 hits: 06-20 to 10-12]		 none[4]
b5919931fe[1]		 Win2K-f 0 of 32 02:55:29 23:50:24 9 none none:none
ASM:Graph
 tElock|
ASProtect|		 48% none
lines=90		 trace
trace
dced8ac2bf
NEW		 none[none] WinXP 0 of 0 12:08:23 12:08:23 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
57ce4acac2
[Firefox:266 hits: 06-17 to 10-12]		 none[4]
57ce4acac2[1]		 WinXP
Win2K-f		 0 of 33 08:03:50 22:21:08 2 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
a61344590a
NEW
ba063349f2
NEW		 none[none]
none [none]		 WinXP 23 of 32 18:22:23 18:22:23 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1a2c0e6130
[Firefox:465 hits: 12-31 to 10-12]		 048df78048 [0] WinXP 29 of 29 08:48:14 08:48:14 1 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
a08f3b74a4
[Firefox:1119 hits: 06-18 to 10-12]		 none[4]
a08f3b74a4[1]		 WinXP
Win2K-f		 0 of 33 01:12:00 23:13:23 14 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
7f89b38665
[Firefox:25 hits: 08-02 to 10-12]
a51a50404e
[Firefox:25 hits: 08-02 to 10-12]		 none[none]
none [none]		 Win2K-f 34 of 36 12:57:19 12:57:19 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
6ea2758c07
[Firefox: 2 hits: 10-07 to 10-12]		 none[none]
none [none]		 WinXP 34 of 36 23:25:43 23:25:43 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]		 none[none] Win2K-f
WinXP		 22 of 36 17:13:04 23:25:43 6 none none:none
 none|none none none
43846e1a17
NEW		 none[none] WinXP 35 of 36 23:29:05 23:29:05 1 none none:none
 none|none none none
51b7b46a6b
NEW		 none[none] WinXP 35 of 36 13:37:55 13:37:55 1 none none:none
 none|none none none
95cb430c7f
NEW		 none[none] WinXP 35 of 36 10:15:53 10:15:53 1 none none:none
 none|none none none
14d64882da
[Firefox: 3 hits: 09-21 to 10-06]		 none[none] Win2K-f 34 of 36 19:56:02 19:56:02 1 none none:none
 none|none none none
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
686d4ca67b
[Firefox: 9 hits: 07-08 to 10-01]		 none[none]
none [none]		 Win2K-f 32 of 33 20:34:46 20:34:46 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
188e34fe5a
NEW		 none[none] WinXP 0 of 0 06:28:16 06:28:16 1 none none:none
 none|none none none
9ccd361742
NEW		 none[none] WinXP 0 of 0 17:36:27 17:36:27 1 none none:none
 none|none none none
df17a625ee
[Firefox:273 hits: 01-01 to 10-12]		 9bbdd086c5 [0] WinXP 29 of 29 05:57:17 16:28:48 3 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
15becf5d1b
NEW
ade75b3df3
NEW		 none[none]
none [none]		 WinXP 27 of 36 06:36:05 06:36:05 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1f00284aa7
NEW		 none[none] WinXP 35 of 36 13:36:49 13:36:49 1 none none:none
 none|none none none
de3e454a46
NEW		 none[none] WinXP 33 of 35 10:11:19 10:11:19 1 none none:none
 none|none none none
c05385e600
[Firefox:24 hits: 01-20 to 10-12]		 6a383b021d [0] WinXP 29 of 29 05:14:39 05:14:39 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
13754a62da
NEW		 none[none] WinXP 35 of 36 08:38:57 08:38:57 1 none none:none
 none|none none none
986b59708d
[Firefox:103 hits: 01-14 to 10-12]		 8a00217866 [0] WinXP 29 of 29 15:46:38 15:46:38 1 none ASM:Graph
 PolyEnE| 100% lines=57 trace
1a8dccb1b8
[Firefox: 2 hits: 10-06 to 10-10]		 none[none] WinXP 35 of 36 07:48:12 07:48:12 1 none none:none
 none|none none none
516f7aaac5
[Firefox: 9 hits: 09-19 to 09-28]		 none[none] WinXP 35 of 36 13:38:53 13:38:53 1 none none:none
 none|none none none
0a2b1894da
[Firefox: 9 hits: 06-26 to 09-26]		 none[none] Win2K-f 30 of 33 08:08:55 08:08:55 1 none none:none
 none|none none none
b2aa60cb38
[Firefox: 2 hits: 07-11 to 07-19]		 none[none] Win2K-f 30 of 33 23:18:38 23:18:38 1 none none:none
 none|none none none
40d8554b40
[Firefox: 2 hits: 10-07 to 10-07]		 none[none] WinXP 32 of 36 16:02:28 16:02:28 1 none none:none
 none|none none none
96d089e522
[Firefox: 5 hits: 10-08 to 10-12]		 none[none] WinXP 34 of 36 04:34:05 23:06:38 5 none none:none
 none|none none none
f9e03b93bc
[Firefox: 4 hits: 10-09 to 10-12]		 none[none] WinXP 35 of 36 19:05:13 19:24:18 2 none none:none
 none|none none none
342d138afd
NEW
41387a24b0
NEW		 none[none]
none [none]		 Win2K-f
WinXP		 32 of 36 01:10:22 12:14:57 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
15becf5d1b
NEW		 none[none] WinXP 0 of 0 06:36:05 06:36:05 1 none none:none
 none|none none none
32bb42820b
NEW		 none[none] WinXP 35 of 36 21:57:28 21:57:28 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3135 hits: 06-17 to 10-12]
73f1082158
[Firefox:1531 hits: 06-18 to 10-12]
e07c29c4ae
[Firefox:619 hits: 06-19 to 10-12]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 02:59:51 07:23:46 2 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
ca47a36342
[Firefox:20 hits: 02-16 to 10-12]		 c3a58f69c6 [0] WinXP 26 of 28 07:30:44 07:30:44 1 none ASM:Graph
 PolyEnE| 100% lines=89
embedded dns		 trace
eca9a5fa95
[Firefox:44 hits: 08-09 to 10-09]		 none[none] WinXP 36 of 36 17:00:04 17:00:04 1 none none:none
 none|none none none
c8b86ec020
NEW		 none[none] WinXP 34 of 36 10:23:00 10:23:00 1 none none:none
 none|none none none
0a2b1894da
[Firefox: 9 hits: 06-26 to 09-26]
414b95a784
[Firefox: 9 hits: 06-26 to 09-26]		 none[none]
none [none]		 Win2K-f 32 of 33 08:08:55 08:08:55 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7f60162c2c
[Firefox:736 hits: 12-31 to 10-12]		 1aad8e4632 [0] WinXP 25 of 25 00:53:31 22:00:47 10 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
632e315db2
[Firefox: 7 hits: 10-03 to 10-11]		 none[none] WinXP 35 of 36 07:41:23 23:29:17 2 none none:none
 none|none none none
1540ff87bb
[Firefox: 2 hits: 10-04 to 10-09]		 none[none] WinXP 35 of 36 08:50:56 08:50:56 1 none none:none
 none|none none none
75347e3aaf
NEW		 none[none] WinXP 34 of 35 10:41:15 16:06:01 2 none none:none
 none|none none none
0c803048e4
[Firefox: 3 hits: 07-26 to 10-12]		 none[none] WinXP 35 of 35 10:19:25 10:19:25 1 none none:none
 none|none none none
71b183b0c8
[Firefox:22 hits: 09-17 to 10-12]		 none[none] WinXP 36 of 36 12:42:24 18:01:51 2 none none:none
 none|none none none
eb9524b2fc
NEW		 none[none] WinXP 35 of 36 16:07:21 16:07:21 1 none none:none
 none|none none none
7d99b0e910
[Firefox:1312 hits: 12-31 to 10-12]		 7a70e1b592 [0] WinXP 26 of 28 01:25:37 15:33:40 7 none ASM:Graph
 PolyEnE| 99% lines=68 trace
a61344590a
NEW		 none[none] WinXP 0 of 0 18:22:23 18:22:23 1 none none:none
 none|none none none
3e209ce796
[Firefox: 3 hits: 06-19 to 08-30]		 none[4] WinXP 32 of 33 17:30:39 17:30:39 1 none none:none
 none|none none trace
7e8bfa9b49
[Firefox:15 hits: 10-01 to 10-12]		 none[none] WinXP 35 of 36 07:01:12 07:01:12 1 none none:none
 none|none none none
05688324d2
NEW
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
b5919931fe
[Firefox:833 hits: 06-20 to 10-12]
d2e0990a9d
[Firefox:12 hits: 10-06 to 10-07]
db34e6277c
NEW		 none[none]
none [none]
b5919931fe[1]
none [none]
none [none]		 Win2K-f 32 of 36 17:13:04 17:13:04 1 none none:none
none:none
ASM:Graph
none:none
none:none
 none|none
none|none
ASProtect|
none|none
none|none		 none
none
lines=90
none
none		 none
none
trace
none
none
14d64882da
[Firefox: 3 hits: 09-21 to 10-06]
1509c8d024
[Firefox:38 hits: 06-17 to 10-11]
46671c0870
[Firefox: 2 hits: 09-27 to 10-07]		 none[none]
none [4]
none [none]		 Win2K-f 22 of 36 19:56:02 19:56:02 1 none none:none
none:none
none:none
 none|none
tElock|
none|none		 none
none
none		 none
trace
none
773d39f53b
NEW		 none[none] WinXP 35 of 36 05:30:30 05:30:30 1 none none:none
 none|none none none
c0e2e2d5ee
NEW		 none[none] WinXP 35 of 36 19:50:20 19:50:20 1 none none:none
 none|none none none
ab5e47bf8d
[Firefox:47 hits: 01-02 to 10-10]		 none[3] WinXP 29 of 29 18:10:12 18:10:12 1 none none:none
 ASPack| none trace
14d64882da
[Firefox: 3 hits: 09-21 to 10-06]
1509c8d024
[Firefox:38 hits: 06-17 to 10-11]		 none[none]
none [4]		 Win2K-f 31 of 33 19:56:02 19:56:02 1 none none:none
none:none
 none|none
tElock|		 none
none		 none
trace
cdf8cd94a9
[Firefox:22 hits: 09-14 to 10-11]		 none[none] WinXP 35 of 36 09:43:36 09:43:36 1 none none:none
 none|none none none
59f1b164b0
[Firefox:10 hits: 10-06 to 10-07]
6ea2758c07
[Firefox: 2 hits: 10-07 to 10-12]
d2e0990a9d
[Firefox:12 hits: 10-06 to 10-07]
d4406c307b
[Firefox: 2 hits: 10-07 to 10-12]		 none[none]
none [none]
none [none]
none [none]		 WinXP 33 of 36 23:25:43 23:25:43 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
54b9f640cd
NEW		 none[none] WinXP 35 of 36 03:36:39 03:36:39 1 none none:none
 none|none none none