Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page



21 October 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.



Packed
MD5
UnPacket
MD5
Victim
OS
AntiVirus
Hit-Cnt
First
Encounter
Last
Encounter
Freq
Cnt
Behavioral
Clusters
Unpacked
Egg.asm
Packer
Fingerprint
API
Resolution
String
Cnt
Syscall
Trace
1e27b7c6ee
NEW
none[none] WinXP 34 of 35 08:57:29 08:57:29 1 none none:none
none|none none none
883db84495
NEW
none[none] WinXP 35 of 36 18:33:31 18:33:31 1 none none:none
none|none none none
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
73f1082158
[Firefox:1610 hits: 06-18 to 10-20]
none[4]
73f1082158[1]
Win2K-f
WinXP
0 of 32 02:13:55 22:01:01 11 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
none[4] Win2K-f
WinXP
33 of 33 02:13:55 23:01:08 30 none none:none
tElock| none trace
0115338c8b
[Firefox:18 hits: 09-12 to 10-20]
none[none] WinXP 33 of 36 12:38:44 12:38:44 1 none none:none
none|none none none
0b82addbc4
[Firefox: 2 hits: 10-20 to 10-20]
87e1117f2a
[Firefox:16 hits: 07-18 to 10-20]
none[none]
none [none]
Win2K-f 32 of 33 08:12:13 13:20:07 2 none none:none
none:none
none|none
none|none
none
none
none
none
644ab77c01
NEW
none[none] WinXP 34 of 36 17:19:40 17:19:40 1 none none:none
none|none none none
7f89b38665
[Firefox:27 hits: 08-02 to 10-20]
none[none] Win2K-f 32 of 36 09:57:24 09:57:24 1 none none:none
none|none none none
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
b5919931fe
[Firefox:870 hits: 06-20 to 10-20]
b7082104e4
[Firefox:216 hits: 06-18 to 10-20]
none[4]
b5919931fe[1]
none [4]
WinXP
Win2K-f
8 of 33 02:49:38 05:47:49 2 none none:none
ASM:Graph
none:none
tElock|
ASProtect|
tElock|
none
lines=90
none
trace
trace
trace
2d146934f1
NEW
none[none] Win2K-f 30 of 36 00:54:08 00:54:08 1 none none:none
none|none none none
7c2b50c774
[Firefox:13 hits: 08-01 to 09-26]
none[none] Win2K-f
WinXP
25 of 36 00:40:09 08:05:27 2 none none:none
none|none none none
0b82addbc4
[Firefox: 2 hits: 10-20 to 10-20]
87e1117f2a
[Firefox:16 hits: 07-18 to 10-20]
ac9e444ce0
[Firefox:16 hits: 10-13 to 10-20]
none[none]
none [none]
none [none]
Win2K-f 8 of 36 13:20:07 13:20:07 1 none none:none
none:none
none:none
none|none
none|none
none|none
none
none
none
none
none
none
6d0afb2b54
[Firefox: 4 hits: 08-06 to 08-17]
none[none] Win2K-f 35 of 36 19:57:52 19:57:52 1 none none:none
none|none none none
73ce2b74da
[Firefox:23 hits: 06-18 to 10-09]
73ce2b74da [1] Win2K-f 3 of 33 03:34:24 03:34:24 1 none ASM:Graph
Armadillo| 47% lines=81 trace
bca9e0fb5f
[Firefox:37 hits: 06-18 to 10-20]
none[4] WinXP 31 of 32 02:22:13 02:22:13 1 none none:none
PolyEnE| none trace
a12cab51ef
[Firefox:585 hits: 01-01 to 10-20]
40f7f463c4 [0] WinXP 29 of 29 19:54:59 20:15:45 2 none ASM:Graph
ASPack| 54% lines=281
embedded dns
trace
370490ea31
[Firefox: 3 hits: 10-13 to 10-14]
none[none] WinXP 35 of 36 12:41:18 12:41:18 1 none none:none
none|none none none
b52d214d08
[Firefox: 8 hits: 10-05 to 10-20]
none[none] WinXP 35 of 36 06:48:06 19:12:15 8 none none:none
none|none none none
2785aaadc6
NEW
none[none] WinXP 34 of 36 10:22:28 10:22:28 1 none none:none
none|none none none
f665a37b6c
NEW
none[none] WinXP 36 of 36 20:47:00 20:47:00 1 none none:none
none|none none none
f5ab9763ea
[Firefox:11 hits: 10-03 to 10-20]
none[none] WinXP 35 of 36 15:23:15 23:16:22 2 none none:none
none|none none none
03f912899b
[Firefox:173 hits: 01-08 to 10-20]
83893bd25d [0] WinXP 32 of 32 01:20:32 13:13:08 3 none ASM:Graph
none|none 100% lines=65 trace
2e04b06527
[Firefox:13 hits: 06-18 to 10-12]
514265be41
[Firefox: 3 hits: 09-24 to 10-04]
none[4]
none [none]
Win2K-f 2 of 36 05:29:33 05:29:33 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
5daac7f4a5
NEW
none[none] WinXP 29 of 36 01:26:24 01:26:24 1 none none:none
none|none none none
4ed031d88c
NEW
none[none] WinXP 35 of 36 00:30:02 00:30:02 1 none none:none
none|none none none
5e4f6ad9dc
[Firefox: 2 hits: 10-20 to 10-20]
none[none] WinXP 36 of 36 10:22:59 10:25:10 2 none none:none
none|none none none
ac25ac39b4
NEW
none[none] Win2K-f
WinXP
29 of 35 01:37:38 03:59:23 3 none none:none
none|none none none
f75c383301
NEW
none[none] WinXP 34 of 35 11:53:49 11:53:49 1 none none:none
none|none none none
741e3b03b3
[Firefox:485 hits: 01-05 to 10-20]
e0197e8a64 [0] WinXP 31 of 32 04:28:19 18:04:50 5 none ASM:Graph
none|none 100% lines=62 trace
c3868918c1
NEW
none[none] Win2K-f 32 of 36 02:27:38 02:27:38 1 none none:none
none|none none none
92ff7d574b
NEW
none[none] WinXP 34 of 36 23:53:57 23:53:57 1 none none:none
none|none none none
2d6c8c447f
[Firefox:22 hits: 09-16 to 10-20]
none[none] WinXP 36 of 36 11:24:57 11:24:57 1 none none:none
none|none none none
831f4ee0a7
[Firefox:615 hits: 01-01 to 10-20]
eb7546c600 [0] WinXP 29 of 29 04:32:55 17:37:10 3 none ASM:Graph
none|none 100% lines=61 trace
28b1bbe949
NEW
none[none] Win2K-f 31 of 36 03:21:00 03:21:00 1 none none:none
none|none none none
b5919931fe
[Firefox:870 hits: 06-20 to 10-20]
b5919931fe [1] Win2K-f 0 of 32 04:33:54 23:29:59 10 none ASM:Graph
ASProtect| 48% lines=90 trace
f53f6ea4f8
NEW
none[none] WinXP 35 of 36 04:01:08 04:01:08 1 none none:none
none|none none none
0115338c8b
[Firefox:18 hits: 09-12 to 10-20]
321f4fc27d
[Firefox:18 hits: 09-12 to 10-20]
none[none]
none [none]
WinXP 31 of 36 12:38:44 12:38:44 1 none none:none
none:none
none|none
none|none
none
none
none
none
5236b742ce
NEW
none[none] WinXP 34 of 35 10:11:57 10:11:57 1 none none:none
none|none none none
b5919931fe
[Firefox:870 hits: 06-20 to 10-20]
dd98c3c108
[Firefox: 9 hits: 06-24 to 10-20]
b5919931fe [1]
dd98c3c108[1]
Win2K-f 29 of 33 23:29:59 23:29:59 1 none ASM:Graph
ASM:Graph
ASProtect|
Armadillo|
47% lines=90
lines=82
trace
trace
6ec2a8994b
[Firefox:27 hits: 06-18 to 10-11]
bcf66a38c8
[Firefox:14 hits: 07-30 to 10-14]
none[4]
none [none]
WinXP 2 of 35 10:12:22 10:12:22 1 none none:none
none:none
tElock|
none|none
none
none
trace
none
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
57ce4acac2
[Firefox:279 hits: 06-17 to 10-20]
none[4]
57ce4acac2[1]
WinXP
Win2K-f
0 of 33 02:59:32 19:34:02 5 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
6c9f31fee4
NEW
none[none] WinXP 35 of 36 12:52:52 12:52:52 1 none none:none
none|none none none
1a2c0e6130
[Firefox:476 hits: 12-31 to 10-20]
048df78048 [0] WinXP 29 of 29 00:22:42 11:05:31 3 none ASM:Graph
none|none 100% lines=61 trace
0b82addbc4
[Firefox: 2 hits: 10-20 to 10-20]
none[none] Win2K-f 6 of 36 13:20:07 13:20:07 1 none none:none
none|none none none
142c0d8e6f
NEW
none[none] WinXP 34 of 36 09:24:09 09:24:09 1 none none:none
none|none none none
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
a08f3b74a4
[Firefox:1171 hits: 06-18 to 10-20]
none[4]
a08f3b74a4[1]
Win2K-f
WinXP
0 of 33 03:08:03 23:01:08 12 none none:none
ASM:Graph
tElock|
Armadillo|
47% none
lines=81
trace
trace
57c095a73a
[Firefox: 2 hits: 09-18 to 10-20]
71feff97fb
[Firefox: 2 hits: 09-18 to 10-20]
none[none]
none [none]
Win2K-f 32 of 36 20:49:21 20:49:21 1 none none:none
none:none
none|none
none|none
none
none
none
none
7f89b38665
[Firefox:27 hits: 08-02 to 10-20]
a51a50404e
[Firefox:27 hits: 08-02 to 10-20]
none[none]
none [none]
Win2K-f 34 of 36 09:57:24 09:57:24 1 none none:none
none:none
none|none
none|none
none
none
none
none
af222ae6db
[Firefox: 2 hits: 08-15 to 08-15]
none[none] WinXP
Win2K-f
0 of 0 01:49:50 04:25:29 2 none none:none
none|none none none
aa268ff3a9
[Firefox: 5 hits: 08-15 to 10-20]
none[none] Win2K-f 31 of 34 01:00:55 02:13:53 2 none none:none
none|none none none
e01661b93e
NEW
none[none] WinXP 34 of 36 11:19:36 11:20:25 2 none none:none
none|none none none
a0139d7ad8
[Firefox:168 hits: 01-03 to 10-20]
d9e9662db1 [0] WinXP 29 of 29 04:05:54 08:51:44 3 none ASM:Graph
PolyEnE| 99% lines=68 trace
0b82addbc4
[Firefox: 2 hits: 10-20 to 10-20]
87e1117f2a
[Firefox:16 hits: 07-18 to 10-20]
ac9e444ce0
[Firefox:16 hits: 10-13 to 10-20]
b4fe4581c3
[Firefox:16 hits: 07-18 to 10-20]
none[none]
none [none]
none [none]
none [none]
Win2K-f 29 of 33 08:12:13 13:20:07 2 none none:none
none:none
none:none
none:none
none|none
none|none
none|none
none|none
none
none
none
none
none
none
none
none
b5919931fe
[Firefox:870 hits: 06-20 to 10-20]
dd98c3c108
[Firefox: 9 hits: 06-24 to 10-20]
e98746deb1
[Firefox: 8 hits: 06-24 to 10-20]
b5919931fe [1]
dd98c3c108[1]
none [4]
Win2K-f 31 of 33 23:29:59 23:29:59 1 none ASM:Graph
ASM:Graph
none:none
ASProtect|
Armadillo|
tElock|
lines=90
lines=82
none
trace
trace
trace
f364930915
NEW
none[none] WinXP 34 of 35 10:52:29 10:52:29 1 none none:none
none|none none none
c6059fcbd5
[Firefox: 6 hits: 09-23 to 10-20]
none[none] WinXP 34 of 36 09:58:34 09:58:34 1 none none:none
none|none none none
7e6e770f9e
NEW
none[none] WinXP 34 of 36 16:56:39 16:57:04 2 none none:none
none|none none none
25799a17b4
NEW
none[none] WinXP 34 of 35 08:52:50 08:52:50 1 none none:none
none|none none none
45d3b6bd28
NEW
none[none] WinXP 34 of 36 10:15:31 10:15:31 1 none none:none
none|none none none
6ec2a8994b
[Firefox:27 hits: 06-18 to 10-11]
none[4] WinXP 30 of 33 10:12:22 10:12:22 1 none none:none
tElock| none trace
b072dd40a7
NEW
none[none] WinXP 36 of 36 22:09:28 22:09:28 1 none none:none
none|none none none
ea39b7911d
[Firefox: 6 hits: 08-15 to 10-20]
none[none] Win2K-f
WinXP
31 of 36 00:12:29 01:47:52 2 none none:none
none|none none none
79aff12cdd
NEW
f789de6c3b
NEW
none[none]
none [none]
Win2K-f 34 of 36 07:42:21 07:42:21 1 none none:none
none:none
none|none
none|none
none
none
none
none
31238aa568
NEW
none[none] WinXP 35 of 36 13:41:51 13:41:51 1 none none:none
none|none none none
d142a982d2
[Firefox: 5 hits: 08-15 to 10-20]
none[none] Win2K-f 30 of 35 01:07:22 01:42:19 2 none none:none
none|none none none
a7003c5a33
NEW
none[none] WinXP 33 of 34 05:50:24 05:50:24 1 none none:none
none|none none none
a0012f058f
NEW
none[none] WinXP 36 of 36 06:17:52 06:17:52 1 none none:none
none|none none none
64d359864b
NEW
none[none] WinXP 33 of 36 17:31:04 17:31:04 1 none none:none
none|none none none
d6df3972a0
[Firefox:33 hits: 01-07 to 10-09]
39eeef52a4 [0] WinXP 29 of 29 14:48:54 14:48:54 1 none ASM:Graph
PolyEnE| 100% lines=65 trace
96d089e522
[Firefox:20 hits: 10-08 to 10-20]
none[none] WinXP 34 of 36 14:05:44 14:05:44 1 none none:none
none|none none none
a8d74af6d5
[Firefox: 2 hits: 10-04 to 10-20]
none[none] WinXP 35 of 36 17:19:01 17:19:01 1 none none:none
none|none none none
2f8e21d7f8
NEW
none[none] WinXP 34 of 35 09:25:39 13:58:20 2 none none:none
none|none none none
bca9e0fb5f
[Firefox:37 hits: 06-18 to 10-20]
e07c29c4ae
[Firefox:647 hits: 06-19 to 10-20]
e53a9ea82e
[Firefox:36 hits: 06-18 to 10-12]
none[4]
e07c29c4ae[1]
e53a9ea82e[1]
WinXP 23 of 33 02:22:13 02:22:13 1 none none:none
ASM:Graph
ASM:Graph
PolyEnE|
FSG|
Armadillo|
47% none
lines=92
lines=81
trace
trace
trace
6b3beaea1a
NEW
none[none] WinXP 35 of 36 03:27:17 03:28:44 2 none none:none
none|none none none
50765eef8f
NEW
none[none] Win2K-f 33 of 35 21:46:37 21:46:37 1 none none:none
none|none none none
590e860fa7
NEW
none[none] WinXP 35 of 36 03:04:30 03:04:30 1 none none:none
none|none none none
0c3d1ec2df
[Firefox:11 hits: 08-11 to 10-04]
none[none] Win2K-f 32 of 36 13:50:06 13:50:06 1 none none:none
none|none none none
5b70b1f892
NEW
none[none] WinXP 34 of 36 00:35:14 03:34:35 2 none none:none
none|none none none
53bfe15e91
[Firefox:3259 hits: 06-17 to 10-20]
a08f3b74a4
[Firefox:1171 hits: 06-18 to 10-20]
e07c29c4ae
[Firefox:647 hits: 06-19 to 10-20]
none[4]
a08f3b74a4[1]
e07c29c4ae[1]
WinXP 0 of 33 02:22:13 23:01:08 14 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG|
48% none
lines=81
lines=92
trace
trace
trace
44ea4d3c7c
[Firefox: 4 hits: 09-26 to 10-20]
none[none] WinXP 30 of 36 03:16:24 03:16:24 1 none none:none
none|none none none
ca47a36342
[Firefox:21 hits: 02-16 to 10-13]
c3a58f69c6 [0] WinXP 26 of 28 03:32:38 12:33:08 2 none ASM:Graph
PolyEnE| 100% lines=89
embedded dns
trace
6d0afb2b54
[Firefox: 4 hits: 08-06 to 08-17]
b5919931fe
[Firefox:870 hits: 06-20 to 10-20]
fbd87f4eaa
[Firefox: 4 hits: 08-06 to 08-17]
none[none]
b5919931fe[1]
none [none]
Win2K-f 32 of 36 19:57:52 19:57:52 1 none none:none
ASM:Graph
none:none
none|none
ASProtect|
none|none
none
lines=90
none
none
trace
none
e50d19ea22
NEW
none[none] WinXP 33 of 35 20:33:35 20:33:35 1 none none:none
none|none none none
9d31d168bd
NEW
none[none] Win2K-f 30 of 36 03:11:30 03:11:30 1 none none:none
none|none none none
49d6cdaab4
[Firefox:11 hits: 09-13 to 10-14]
none[none] WinXP 34 of 36 07:40:20 20:49:45 2 none none:none
none|none none none
3690b64ca2
[Firefox: 7 hits: 06-18 to 08-30]
none[4] Win2K-f 32 of 33 00:13:40 00:13:40 1 none none:none
PolyEnE| none trace
1d988e57e4
[Firefox: 6 hits: 09-26 to 10-20]
none[none] WinXP
Win2K-f
35 of 36 01:24:45 02:46:31 2 none none:none
none|none none none
13003605cc
[Firefox: 5 hits: 09-15 to 10-02]
none[none] WinXP 0 of 0 19:47:00 19:47:00 1 none none:none
none|none none none
7f60162c2c
[Firefox:768 hits: 12-31 to 10-20]
1aad8e4632 [0] WinXP 25 of 25 17:13:20 17:13:20 1 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns
trace
57ce4acac2
[Firefox:279 hits: 06-17 to 10-20]
83f26f5044
[Firefox:29 hits: 06-20 to 10-15]
57ce4acac2 [1]
none [4]
WinXP 29 of 32 02:59:32 02:59:32 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
776985f561
[Firefox:20 hits: 06-24 to 10-16]
776985f561 [1] WinXP 31 of 33 09:10:57 09:10:57 1 none ASM:Graph
Armadillo| 47% lines=82 trace
2d815d2be3
[Firefox: 3 hits: 09-25 to 10-11]
none[none] WinXP 34 of 36 13:34:28 13:34:28 1 none none:none
none|none none none
75347e3aaf
[Firefox: 3 hits: 10-11 to 10-13]
none[none] WinXP 34 of 35 00:24:10 00:24:10 1 none none:none
none|none none none
632e315db2
[Firefox:18 hits: 10-03 to 10-20]
none[none] WinXP 35 of 36 06:55:04 06:55:04 1 none none:none
none|none none none
3690b64ca2
[Firefox: 7 hits: 06-18 to 08-30]
a6fb77fd26
[Firefox: 7 hits: 06-18 to 08-30]
none[4]
a6fb77fd26[1]
Win2K-f 30 of 33 00:13:40 00:13:40 1 none none:none
ASM:Graph
PolyEnE|
Armadillo|
47% none
lines=82
trace
trace
71b183b0c8
[Firefox:31 hits: 09-17 to 10-20]
none[none] WinXP 36 of 36 08:16:02 08:16:02 1 none none:none
none|none none none
1c8b439ba5
[Firefox: 2 hits: 10-20 to 10-20]
none[none] WinXP 33 of 36 14:53:07 14:53:07 1 none none:none
none|none none none
e362f1c062
[Firefox: 6 hits: 08-15 to 10-20]
none[none] WinXP
Win2K-f
29 of 34 00:25:24 08:49:37 6 none none:none
none|none none none
0c3d1ec2df
[Firefox:11 hits: 08-11 to 10-04]
8de905030e
[Firefox:11 hits: 08-11 to 10-04]
none[none]
none [none]
Win2K-f 34 of 36 13:50:06 13:50:06 1 none none:none
none:none
none|none
none|none
none
none
none
none
79aff12cdd
NEW
none[none] Win2K-f 34 of 36 07:42:21 07:42:21 1 none none:none
none|none none none
73ce2b74da
[Firefox:23 hits: 06-18 to 10-09]
79c01ec060
[Firefox:54 hits: 06-18 to 10-09]
73ce2b74da [1]
none [4]
Win2K-f 33 of 33 03:34:24 03:34:24 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=81
none
trace
trace
7d99b0e910
[Firefox:1348 hits: 12-31 to 10-20]
7a70e1b592 [0] WinXP 26 of 28 05:52:02 20:34:44 10 none ASM:Graph
PolyEnE| 99% lines=68 trace
87bf2f533f
[Firefox: 4 hits: 10-02 to 10-10]
none[none] WinXP 35 of 36 12:31:48 12:31:48 1 none none:none
none|none none none
3a322fdf34
[Firefox: 2 hits: 09-26 to 10-20]
none[none] WinXP 34 of 36 00:57:47 00:57:47 1 none none:none
none|none none none
a7747c1662
NEW
none[none] Win2K-f 35 of 36 06:40:51 06:40:51 1 none none:none
none|none none none
776985f561
[Firefox:20 hits: 06-24 to 10-16]
8ec6129efe
[Firefox:19 hits: 06-24 to 10-16]
776985f561 [1]
none [4]
WinXP 31 of 33 09:10:57 09:10:57 1 none ASM:Graph
none:none
Armadillo|
tElock|
lines=82
none
trace
trace
b3ce57c019
[Firefox: 3 hits: 08-15 to 08-15]
none[none] Win2K-f 23 of 36 00:59:20 00:59:20 1 none none:none
none|none none none
57c095a73a
[Firefox: 2 hits: 09-18 to 10-20]
none[none] Win2K-f 34 of 36 20:49:21 20:49:21 1 none none:none
none|none none none
c0e2e2d5ee
[Firefox: 5 hits: 10-12 to 10-20]
none[none] WinXP 35 of 36 02:19:19 02:19:19 1 none none:none
none|none none none
1be9d03a2b
[Firefox:12 hits: 07-29 to 10-20]
none[none] WinXP
Win2K-f
25 of 35 00:18:27 03:47:49 4 none none:none
none|none none none
a12cab51ef
[Firefox:585 hits: 01-01 to 10-20]
dbea341d9b
NEW
40f7f463c4 [0]
none [none]
WinXP 0 of 36 19:54:59 19:54:59 1 none ASM:Graph
none:none
ASPack|
none|none
lines=281
embedded dns
none
trace
none
2e04b06527
[Firefox:13 hits: 06-18 to 10-12]
none[4] Win2K-f 30 of 33 05:29:33 05:29:33 1 none none:none
tElock| none trace
25d31b9561
NEW
none[none] WinXP 33 of 36 07:17:34 07:17:34 1 none none:none
none|none none none
65dac37941
NEW
none[none] WinXP 35 of 36 01:54:17 01:54:17 1 none none:none
none|none none none