Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page


15 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5 		UnPacket
MD5 		Victim
OS 		AntiVirus
Hit-Cnt 		First
Encounter 		Last
Encounter 		Freq
Cnt 		Behavioral
Clusters 		Unpacked
Egg.asm 		Packer
Fingerprint 		API
Resolution 		String
Cnt 		Syscall
Trace
b7ba8daae1
NEW		 none[none] WinXP 34 of 36 04:30:45 19:17:53 5 none none:none
 none|none none none
a917b38976
NEW		 none[none] WinXP 35 of 36 14:08:04 14:08:04 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]
73f1082158
[Firefox:1563 hits: 06-18 to 10-14]		 none[4]
73f1082158[1]		 Win2K-f
WinXP		 0 of 32 00:56:14 22:34:03 14 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
1fcc146d70
[Firefox:57 hits: 01-02 to 10-14]		 258fafe892 [0] WinXP 29 of 29 23:34:07 23:34:07 1 none ASM:Graph
 PolyEnE| 99% lines=68 trace
5a6eafb317
[Firefox: 2 hits: 10-09 to 10-11]		 none[none] WinXP 35 of 36 10:36:38 10:36:38 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]		 none[4] Win2K-f
WinXP		 33 of 33 00:24:47 22:34:03 23 none none:none
 tElock| none trace
1eacab1cc9
[Firefox: 2 hits: 09-28 to 09-30]		 none[none] Win2K-f 34 of 36 17:41:39 17:41:39 1 none none:none
 none|none none none
f592d52f3c
[Firefox: 6 hits: 01-06 to 10-08]		 85a7174aed [0] WinXP 29 of 29 16:40:47 16:40:47 1 none ASM:Graph
 PolyEnE| 99% lines=73 trace
0115338c8b
[Firefox:15 hits: 09-12 to 10-11]		 none[none] Win2K-f 33 of 36 07:43:56 07:43:56 1 none none:none
 none|none none none
0b365762ee
NEW		 none[none] WinXP 35 of 36 20:01:16 20:01:16 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]
b7082104e4
[Firefox:202 hits: 06-18 to 10-14]		 none[4]
none [4]		 Win2K-f
WinXP		 8 of 33 03:44:10 17:16:36 3 none none:none
none:none
 tElock|
tElock|		 none
none		 trace
trace
d28bf8aa1a
[Firefox: 8 hits: 09-12 to 10-01]		 none[none] WinXP 36 of 36 05:39:39 14:27:04 2 none none:none
 none|none none none
0474b4b09f
[Firefox: 6 hits: 09-24 to 10-14]		 none[none] Win2K-f 34 of 36 05:27:56 05:27:56 1 none none:none
 none|none none none
37e444055e
NEW		 none[none] WinXP 0 of 36 19:05:19 19:05:19 1 none none:none
 none|none none none
152f4c79b5
[Firefox: 2 hits: 10-12 to 10-14]		 none[none] WinXP 35 of 36 02:55:49 02:55:49 1 none none:none
 none|none none none
80de3bee9a
NEW		 none[none] Win2K-f 34 of 36 15:41:36 15:41:36 1 none none:none
 none|none none none
4a135d579d
NEW
7f66e51c85
[Firefox:12 hits: 07-11 to 10-09]
9d12fe9d3b
[Firefox:13 hits: 07-11 to 10-09]
aa0be4fd00
NEW
ac9e444ce0
[Firefox: 8 hits: 10-13 to 10-14]		 none[none]
none [none]
none [none]
none [none]
none [none]		 WinXP
Win2K-f		 8 of 36 11:25:05 21:07:42 3 none none:none
none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none
none|none		 none
none
none
none
none		 none
none
none
none
none
2f746ab765
NEW		 none[none] WinXP 25 of 35 11:33:01 11:33:01 1 none none:none
 none|none none none
168aab35a3
[Firefox:167 hits: 06-17 to 10-14]		 none[4] WinXP 31 of 33 04:48:28 04:48:28 1 none none:none
 tElock| none trace
0e5f51ee8e
[Firefox: 4 hits: 10-11 to 10-14]		 none[none] WinXP 33 of 36 07:26:06 14:09:31 3 none none:none
 none|none none none
c5dee159d0
[Firefox: 2 hits: 10-07 to 10-11]		 none[none] Win2K-f
WinXP		 5 of 36 01:52:10 03:36:47 2 none none:none
 none|none none none
d42c1cc7c0
[Firefox:141 hits: 01-01 to 10-03]		 af9ca5bed1 [0] WinXP 29 of 29 13:46:01 13:46:01 1 none ASM:Graph
 PolyEnE| 100% lines=54 trace
37e444055e
NEW
a12cab51ef
[Firefox:581 hits: 01-01 to 10-14]		 none[none]
40f7f463c4[0]		 WinXP 29 of 29 19:05:19 19:05:19 1 none none:none
ASM:Graph
 none|none
ASPack|		 54% none
lines=281
embedded dns		 none
trace
fee215afd0
[Firefox: 3 hits: 09-26 to 10-01]		 none[none] WinXP 33 of 35 03:13:54 03:13:54 1 none none:none
 none|none none none
f5ab9763ea
[Firefox: 8 hits: 10-03 to 10-14]		 none[none] WinXP 35 of 36 03:56:20 03:56:20 1 none none:none
 none|none none none
03f912899b
[Firefox:170 hits: 01-08 to 10-14]		 83893bd25d [0] WinXP 32 of 32 13:35:49 19:53:30 2 none ASM:Graph
 none|none 100% lines=65 trace
726638fb22
[Firefox: 3 hits: 09-19 to 09-30]		 none[none] WinXP 34 of 36 23:52:19 23:52:19 1 none none:none
 none|none none none
168aab35a3
[Firefox:167 hits: 06-17 to 10-14]
4c3df24b32
[Firefox:220 hits: 06-17 to 10-13]		 none[4]
4c3df24b32[1]		 WinXP 0 of 33 04:48:28 04:48:28 1 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
738eb92db2
[Firefox: 2 hits: 10-06 to 10-14]		 none[none] Win2K-f 32 of 36 23:24:22 23:24:22 1 none none:none
 none|none none none
119cdb01eb
[Firefox: 3 hits: 10-11 to 10-14]		 none[none] Win2K-f 33 of 36 08:51:48 08:51:48 1 none none:none
 none|none none none
8ab97fa54d
NEW		 none[none] WinXP 34 of 36 05:38:08 05:38:08 1 none none:none
 none|none none none
05688324d2
[Firefox: 2 hits: 10-13 to 10-14]		 none[none] Win2K-f 35 of 36 10:23:29 10:23:29 1 none none:none
 none|none none none
741e3b03b3
[Firefox:471 hits: 01-05 to 10-14]		 e0197e8a64 [0] WinXP 31 of 32 00:46:59 20:43:29 7 none ASM:Graph
 none|none 100% lines=62 trace
f353d4eed9
[Firefox:34 hits: 09-17 to 10-14]		 none[none] WinXP 35 of 36 06:20:15 14:36:38 2 none none:none
 none|none none none
831f4ee0a7
[Firefox:607 hits: 01-01 to 10-14]		 eb7546c600 [0] WinXP 29 of 29 05:06:27 23:52:39 4 none ASM:Graph
 none|none 100% lines=61 trace
ac9e444ce0
[Firefox: 8 hits: 10-13 to 10-14]
cdf9452017
NEW		 none[none]
none [none]		 WinXP 17 of 36 11:25:05 11:25:05 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
1eacab1cc9
[Firefox: 2 hits: 09-28 to 09-30]
d43f7bdb88
[Firefox: 2 hits: 09-28 to 09-30]		 none[none]
none [none]		 Win2K-f 22 of 36 17:41:39 17:41:39 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]
73f1082158
[Firefox:1563 hits: 06-18 to 10-14]
b5919931fe
[Firefox:848 hits: 06-20 to 10-14]		 none[4]
73f1082158[1]
b5919931fe[1]		 Win2K-f 0 of 32 01:16:54 19:11:48 5 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
ASProtect|		 48% none
lines=81
lines=90		 trace
trace
trace
17028f1eda
[Firefox:44 hits: 04-18 to 10-14]		 none[3] WinXP 31 of 32 03:14:08 15:55:15 6 none none:none
 tElock| none trace
0115338c8b
[Firefox:15 hits: 09-12 to 10-11]
321f4fc27d
[Firefox:15 hits: 09-12 to 10-11]		 none[none]
none [none]		 Win2K-f 31 of 36 07:43:56 07:43:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
4a135d579d
NEW
7f66e51c85
[Firefox:12 hits: 07-11 to 10-09]
9d12fe9d3b
[Firefox:13 hits: 07-11 to 10-09]
aa0be4fd00
NEW		 none[none]
none [none]
none [none]
none [none]		 Win2K-f 17 of 36 21:07:42 21:07:42 1 none none:none
none:none
none:none
none:none
 none|none
none|none
none|none
none|none		 none
none
none
none		 none
none
none
none
57ce4acac2
[Firefox:270 hits: 06-17 to 10-14]		 57ce4acac2 [1] Win2K-f
WinXP		 0 of 33 09:36:31 20:52:36 4 none ASM:Graph
 Armadillo| 47% lines=81 trace
4a135d579d
NEW		 none[none] Win2K-f 17 of 36 21:07:42 21:07:42 1 none none:none
 none|none none none
0450aec44f
NEW		 none[none] WinXP 34 of 35 13:07:22 13:07:22 1 none none:none
 none|none none none
1a2c0e6130
[Firefox:469 hits: 12-31 to 10-14]		 048df78048 [0] WinXP 29 of 29 02:27:02 19:07:27 4 none ASM:Graph
 none|none 100% lines=61 trace
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]
a08f3b74a4
[Firefox:1149 hits: 06-18 to 10-14]		 none[4]
a08f3b74a4[1]		 Win2K-f
WinXP		 0 of 33 00:24:47 19:08:37 5 none none:none
ASM:Graph
 tElock|
Armadillo|		 47% none
lines=81		 trace
trace
2d5d209026
NEW		 none[none] Win2K-f 32 of 36 18:09:52 18:09:52 1 none none:none
 none|none none none
b872c76081
[Firefox:59 hits: 09-13 to 10-14]		 none[none] WinXP 36 of 36 12:37:13 14:07:56 2 none none:none
 none|none none none
18c7040ea0
[Firefox: 4 hits: 09-15 to 10-12]		 none[none] WinXP 34 of 36 09:05:16 09:05:16 1 none none:none
 none|none none none
1c29f5598e
NEW		 none[none] WinXP 31 of 36 16:58:12 16:58:12 1 none none:none
 none|none none none
d0d92d58c3
NEW		 none[none] WinXP 35 of 36 02:52:35 02:52:35 1 none none:none
 none|none none none
2ef9098242
[Firefox: 3 hits: 07-05 to 09-29]
ac8612c1dc
NEW		 none[none]
none [none]		 Win2K-f 34 of 35 00:26:18 00:26:18 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
0474b4b09f
[Firefox: 6 hits: 09-24 to 10-14]
1c3210698a
[Firefox: 7 hits: 07-13 to 10-14]		 none[none]
none [none]		 Win2K-f 29 of 33 05:27:56 05:27:56 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
caf7b0fa3d
NEW		 none[none] WinXP 33 of 36 07:25:29 07:25:29 1 none none:none
 none|none none none
5b3d36b84b
[Firefox: 2 hits: 10-07 to 10-07]		 none[none] WinXP 36 of 36 14:32:52 14:34:27 2 none none:none
 none|none none none
566fdd98dd
NEW		 none[none] WinXP 34 of 36 09:57:52 09:58:15 2 none none:none
 none|none none none
7e6e770f9e
NEW		 none[none] WinXP 34 of 36 03:37:22 03:37:22 1 none none:none
 none|none none none
0b365762ee
NEW
24984f7b74
NEW
732b917369
NEW		 none[none]
none [none]
none [none]		 WinXP 32 of 36 20:01:16 20:01:16 1 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
45d3b6bd28
NEW		 none[none] WinXP 34 of 36 15:40:11 15:40:11 1 none none:none
 none|none none none
14407d927b
NEW		 none[none] WinXP 34 of 36 00:08:53 00:08:53 1 none none:none
 none|none none none
df17a625ee
[Firefox:279 hits: 01-01 to 10-14]		 9bbdd086c5 [0] WinXP 29 of 29 02:43:54 07:11:16 3 none ASM:Graph
 ASPack| 49% lines=186
embedded dns		 trace
44d6655e08
NEW		 none[none] WinXP 0 of 36 10:03:22 10:03:22 1 none none:none
 none|none none none
4a135d579d
NEW
7f66e51c85
[Firefox:12 hits: 07-11 to 10-09]
9d12fe9d3b
[Firefox:13 hits: 07-11 to 10-09]		 none[none]
none [none]
none [none]		 WinXP
Win2K-f		 29 of 32 20:46:55 21:07:42 2 none none:none
none:none
none:none
 none|none
none|none
none|none		 none
none
none		 none
none
none
a3d4d26e6e
NEW		 none[none] WinXP 35 of 36 04:00:24 04:00:24 1 none none:none
 none|none none none
090753e602
NEW
79595a71bb
NEW		 none[none]
none [none]		 Win2K-f 33 of 36 10:00:03 10:00:03 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b2aa60cb38
[Firefox: 3 hits: 07-11 to 10-13]		 none[none] Win2K-f 30 of 33 17:06:45 17:06:45 1 none none:none
 none|none none none
96d089e522
[Firefox:13 hits: 10-08 to 10-14]		 none[none] WinXP 34 of 36 18:45:29 22:43:46 5 none none:none
 none|none none none
f9e03b93bc
[Firefox: 6 hits: 10-09 to 10-13]		 none[none] WinXP 35 of 36 19:00:30 19:00:30 1 none none:none
 none|none none none
8ad3105462
[Firefox: 4 hits: 01-10 to 08-09]		 none[4] WinXP 25 of 32 18:28:41 18:28:41 1 none none:none
 none|none none trace
87bd0a062f
[Firefox: 9 hits: 06-29 to 09-21]		 none[none] WinXP 30 of 33 06:19:52 06:19:52 1 none none:none
 none|none none none
ec0ea881ab
NEW		 none[none] WinXP 34 of 36 00:17:13 00:17:13 1 none none:none
 none|none none none
53bfe15e91
[Firefox:3206 hits: 06-17 to 10-14]
73f1082158
[Firefox:1563 hits: 06-18 to 10-14]
e07c29c4ae
[Firefox:634 hits: 06-19 to 10-14]		 none[4]
73f1082158[1]
e07c29c4ae[1]		 WinXP 0 of 33 04:48:28 22:34:03 6 none none:none
ASM:Graph
ASM:Graph
 tElock|
Armadillo|
FSG|		 48% none
lines=81
lines=92		 trace
trace
trace
eca9a5fa95
[Firefox:47 hits: 08-09 to 10-14]		 none[none] WinXP 36 of 36 15:44:35 20:27:07 4 none none:none
 none|none none none
69cd2fb036
NEW		 none[none] WinXP 35 of 36 22:19:34 22:19:35 2 none none:none
 none|none none none
0b09052fb7
[Firefox: 7 hits: 09-12 to 10-14]
d8cf9fc784
[Firefox: 7 hits: 09-12 to 10-14]		 none[none]
none [none]		 WinXP 34 of 36 19:52:54 19:52:54 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
269752b9b6
NEW		 none[none] WinXP 35 of 36 01:15:58 01:16:25 2 none none:none
 none|none none none
0b365762ee
NEW
24984f7b74
NEW		 none[none]
none [none]		 WinXP 17 of 36 20:01:16 20:01:16 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
85597d85c0
[Firefox: 4 hits: 04-29 to 09-26]		 f00f427b94 [0] WinXP 29 of 31 04:05:57 04:05:57 1 none ASM:Graph
 PolyEnE| 54% lines=265
embedded dns		 trace
4aeb3ad750
NEW		 none[none] WinXP 34 of 36 11:52:07 11:52:07 1 none none:none
 none|none none none
57ce4acac2
[Firefox:270 hits: 06-17 to 10-14]
83f26f5044
[Firefox:27 hits: 06-20 to 10-09]		 57ce4acac2 [1]
none [4]		 Win2K-f 29 of 32 19:14:38 20:52:36 2 none ASM:Graph
none:none
 Armadillo|
tElock|		 lines=81
none		 trace
trace
7f60162c2c
[Firefox:755 hits: 12-31 to 10-14]		 1aad8e4632 [0] WinXP 25 of 25 01:43:47 23:48:57 6 none ASM:Graph
 PolyEnE| 100% lines=93
embedded dns		 trace
b5919931fe
[Firefox:848 hits: 06-20 to 10-14]
b74e792974
[Firefox:12 hits: 06-18 to 10-09]		 b5919931fe [1]
b74e792974[1]		 Win2K-f 31 of 33 17:48:53 17:48:53 1 none ASM:Graph
ASM:Graph
 ASProtect|
Armadillo|		 47% lines=90
lines=82		 trace
trace
632e315db2
[Firefox:12 hits: 10-03 to 10-14]		 none[none] WinXP 35 of 36 08:20:19 17:17:33 2 none none:none
 none|none none none
71b183b0c8
[Firefox:26 hits: 09-17 to 10-14]		 none[none] WinXP 36 of 36 05:41:59 12:51:53 2 none none:none
 none|none none none
0b09052fb7
[Firefox: 7 hits: 09-12 to 10-14]		 none[none] WinXP 34 of 36 19:52:54 19:52:54 1 none none:none
 none|none none none
d526bf5a3f
[Firefox: 2 hits: 10-12 to 10-12]		 none[none] WinXP 35 of 36 17:32:47 17:32:47 1 none none:none
 none|none none none
4a135d579d
NEW
7f66e51c85
[Firefox:12 hits: 07-11 to 10-09]		 none[none]
none [none]		 WinXP
Win2K-f		 32 of 33 20:46:55 21:07:42 2 none none:none
none:none
 none|none
none|none		 none
none		 none
none
7d99b0e910
[Firefox:1323 hits: 12-31 to 10-14]		 7a70e1b592 [0] WinXP 26 of 28 04:48:32 22:15:20 8 none ASM:Graph
 PolyEnE| 99% lines=68 trace
dd7ee16b8d
NEW		 none[none] WinXP 34 of 36 04:37:17 09:38:26 2 none none:none
 none|none none none
f987501929
NEW		 none[none] WinXP 34 of 36 21:03:55 21:03:55 1 none none:none
 none|none none none
ad2059afe4
NEW		 none[none] WinXP 34 of 36 16:07:48 16:07:48 1 none none:none
 none|none none none
05688324d2
[Firefox: 2 hits: 10-13 to 10-14]
db34e6277c
[Firefox: 2 hits: 10-13 to 10-14]		 none[none]
none [none]		 Win2K-f 32 of 36 10:23:29 10:23:29 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
b5919931fe
[Firefox:848 hits: 06-20 to 10-14]
b74e792974
[Firefox:12 hits: 06-18 to 10-09]
f0e73c39a8
[Firefox:13 hits: 06-18 to 10-09]		 b5919931fe [1]
b74e792974[1]
none [4]		 Win2K-f 31 of 33 17:48:53 17:48:53 1 none ASM:Graph
ASM:Graph
none:none
 ASProtect|
Armadillo|
tElock|		 lines=90
lines=82
none		 trace
trace
trace
773d39f53b
NEW		 none[none] WinXP 35 of 36 10:45:31 10:45:31 1 none none:none
 none|none none none
d9a4f2f314
[Firefox: 7 hits: 09-29 to 10-10]		 none[none] WinXP 35 of 36 02:35:38 02:35:38 1 none none:none
 none|none none none
87bd0a062f
[Firefox: 9 hits: 06-29 to 09-21]
c7d6018f97
[Firefox: 9 hits: 06-29 to 09-21]		 none[none]
none [none]		 WinXP 31 of 33 06:19:52 06:19:52 1 none none:none
none:none
 none|none
none|none		 none
none		 none
none
91dfbd2049
NEW		 none[none] WinXP 35 of 36 06:11:11 06:11:11 1 none none:none
 none|none none none
090753e602
NEW		 none[none] Win2K-f 32 of 36 10:00:03 10:00:03 1 none none:none
 none|none none none
3e085673e6
NEW		 none[none] WinXP 35 of 36 13:16:09 13:16:09 1 none none:none
 none|none none none
2ef9098242
[Firefox: 3 hits: 07-05 to 09-29]		 none[none] Win2K-f 30 of 33 00:26:18 00:26:18 1 none none:none
 none|none none none