Multiperspective Malware Analysis Page - Daily Malware Binary Digest Summary

Welcome to the Cyber-TA
Daily Malware Binary DIGEST Summary Page

12 November 2008

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Packed
MD5 UnPacket
MD5 Victim
OS AntiVirus
Hit-Cnt First
Encounter Last
Encounter Freq
Cnt Behavioral
Clusters Unpacked
Egg.asm Packer
Fingerprint API
Resolution String
Cnt Syscall
Trace

9c0ad0c1cf
NEW none[none] WinXP 35 of 36 06:52:37 06:52:37 1 none none:none
none|none none none

2881209768
[Firefox:10 hits: 10-22 to 11-02] none[none] WinXP 35 of 36 04:44:46 04:44:46 1 none none:none
none|none none none

0b7b6cbb7c
NEW
5d8bafebdb
NEW none[none]
none [none] Win2K-f 31 of 36 11:04:00 11:04:00 1 none none:none
none:none
none|none
none|none none
none none
none

4dfa3d7b0c
NEW none[none] Win2K-f 33 of 36 18:18:05 18:18:05 1 none none:none
none|none none none

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10]
73f1082158
[Firefox:1928 hits: 06-18 to 11-10] none[4]
73f1082158[1] WinXP
Win2K-f 0 of 32 02:39:25 21:01:14 13 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

41b9df60db
[Firefox: 4 hits: 11-03 to 11-07]
51435ea229
NEW none[none]
none [none] WinXP 32 of 36 23:11:32 23:24:11 2 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10] none[4] Win2K-f
WinXP 33 of 33 00:13:58 23:57:01 24 none none:none
tElock| none trace

b07d6955cd
[Firefox: 2 hits: 10-24 to 11-04] none[none] WinXP 34 of 36 20:16:17 20:16:17 1 none none:none
none|none none none

0548660ce6
NEW none[none] WinXP 35 of 36 01:36:27 01:36:27 1 none none:none
none|none none none

7530118606
NEW none[none] WinXP 33 of 35 13:09:50 13:09:50 1 none none:none
none|none none none

4c3df24b32
[Firefox:247 hits: 06-17 to 11-10]
565d32972d
NEW
7c50c76dbc
NEW 4c3df24b32 [1]
none [none]
none [none] Win2K-f 20 of 36 04:44:39 04:44:39 1 none ASM:Graph
none:none
none:none
Armadillo|
none|none
none|none lines=81
none
none trace
none
none

03f64bb952
[Firefox: 2 hits: 10-05 to 11-09] none[none] WinXP 35 of 36 17:37:14 17:37:14 1 none none:none
none|none none none

a334368630
NEW none[none] WinXP 35 of 36 14:36:03 14:36:03 1 none none:none
none|none none none

0f7c020072
NEW
b2673b6c86
NEW none[none]
none [none] Win2K-f 31 of 36 19:24:51 19:24:51 1 none none:none
none:none
none|none
none|none none
none none
none

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10]
b7082104e4
[Firefox:263 hits: 06-18 to 11-10] none[4]
none [4] Win2K-f 8 of 33 06:48:01 23:57:01 3 none none:none
none:none
tElock|
tElock| none
none trace
trace

06a5e31b47
[Firefox: 8 hits: 10-28 to 11-10] none[none] WinXP 35 of 36 01:48:53 18:08:19 4 none none:none
none|none none none

69be040d0b
[Firefox: 9 hits: 06-21 to 11-09] none[4] Win2K-f 30 of 33 17:47:01 17:47:01 1 none none:none
tElock| none trace

4c3df24b32
[Firefox:247 hits: 06-17 to 11-10]
565d32972d
NEW
7c50c76dbc
NEW
8390780c27
[Firefox:44 hits: 06-18 to 11-07] 4c3df24b32 [1]
none [none]
none [none]
none [4] Win2K-f 30 of 32 04:44:39 04:44:39 1 none ASM:Graph
none:none
none:none
none:none
Armadillo|
none|none
none|none
tElock| lines=81
none
none
none trace
none
none
trace

69be040d0b
[Firefox: 9 hits: 06-21 to 11-09]
81bbbeac34
[Firefox: 9 hits: 06-21 to 11-09] none[4]
81bbbeac34[1] Win2K-f 30 of 33 17:47:01 17:47:01 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

1a56a0a450
NEW none[none] WinXP 35 of 36 12:03:35 12:03:35 1 none none:none
none|none none none

168aab35a3
[Firefox:188 hits: 06-17 to 11-10] none[4] Win2K-f 31 of 33 19:45:41 19:45:41 1 none none:none
tElock| none trace

ddb3bd55db
[Firefox: 6 hits: 10-29 to 11-10] none[none] WinXP 35 of 36 04:22:17 04:22:17 1 none none:none
none|none none none

a12cab51ef
[Firefox:620 hits: 01-01 to 11-10] 40f7f463c4 [0] WinXP 29 of 29 17:50:02 17:50:02 1 none ASM:Graph
ASPack| 54% lines=281
embedded dns trace

18369c36f5
[Firefox: 4 hits: 09-24 to 09-27]
e1cf89c22d
[Firefox: 4 hits: 09-24 to 09-27] none[none]
none [none] Win2K-f 33 of 36 22:54:06 22:54:06 1 none none:none
none:none
none|none
none|none none
none none
none

b52d214d08
[Firefox:51 hits: 10-05 to 11-10] none[none] WinXP 35 of 36 09:12:20 09:12:20 1 none none:none
none|none none none

289d74b4ce
[Firefox:10 hits: 11-03 to 11-10] none[none] WinXP 35 of 36 06:19:23 12:22:00 2 none none:none
none|none none none

d5a5c04ab4
NEW none[none] WinXP 35 of 36 10:47:05 12:11:32 2 none none:none
none|none none none

03f912899b
[Firefox:198 hits: 01-08 to 11-10] 83893bd25d [0] WinXP 32 of 32 09:08:32 20:00:45 4 none ASM:Graph
none|none 100% lines=65 trace

c392067a90
[Firefox:11 hits: 10-06 to 11-09] none[none] WinXP 35 of 36 06:28:04 16:07:09 3 none none:none
none|none none none

bf9f26628c
[Firefox:13 hits: 10-11 to 11-09] none[none] WinXP 35 of 36 02:38:19 12:46:35 3 none none:none
none|none none none

cc91fb83d8
[Firefox: 2 hits: 10-20 to 11-09] none[none] Win2K-f 34 of 36 02:50:01 02:50:01 1 none none:none
none|none none none

4c3df24b32
[Firefox:247 hits: 06-17 to 11-10] 4c3df24b32 [1] Win2K-f 0 of 33 04:44:39 04:44:39 1 none ASM:Graph
Armadillo| 47% lines=81 trace

c5b384d22c
NEW none[none] WinXP 35 of 36 12:32:46 12:32:46 1 none none:none
none|none none none

738eb92db2
[Firefox: 9 hits: 10-06 to 11-05] none[none] WinXP 32 of 36 18:40:31 18:40:31 1 none none:none
none|none none none

741e3b03b3
[Firefox:544 hits: 01-05 to 11-10] e0197e8a64 [0] WinXP 31 of 32 05:52:36 08:06:03 2 none ASM:Graph
none|none 100% lines=62 trace

0f7c020072
NEW none[none] Win2K-f 33 of 36 19:24:51 19:24:51 1 none none:none
none|none none none

b1c85cee4b
[Firefox:25 hits: 10-27 to 11-10] none[none] WinXP 34 of 36 06:20:12 10:49:02 3 none none:none
none|none none none

831f4ee0a7
[Firefox:679 hits: 01-01 to 11-10] eb7546c600 [0] WinXP 29 of 29 02:09:36 22:39:42 4 none ASM:Graph
none|none 100% lines=61 trace

2e43dc0077
[Firefox:14 hits: 10-01 to 11-10]
3fd58319f0
[Firefox: 2 hits: 10-08 to 10-30] none[none]
none [none] Win2K-f 32 of 36 01:14:40 01:14:40 1 none none:none
none:none
none|none
none|none none
none none
none

66859f8fba
NEW none[none] WinXP 20 of 29 14:37:46 14:37:46 1 none none:none
none|none none none

786c3bb507
NEW none[none] WinXP 34 of 36 02:05:50 02:05:50 1 none none:none
none|none none none

168aab35a3
[Firefox:188 hits: 06-17 to 11-10]
61426996c3
[Firefox:19 hits: 06-20 to 11-09]
b5919931fe
[Firefox:1110 hits: 06-20 to 11-10] none[4]
61426996c3[1]
b5919931fe[1] Win2K-f 0 of 32 04:17:33 19:45:41 3 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
ASProtect| 48% none
lines=82
lines=90 trace
trace
trace

2ef9098242
[Firefox: 5 hits: 07-05 to 10-26]
d789c8d157
[Firefox: 6 hits: 07-05 to 10-26] none[none]
none [none] Win2K-f 31 of 33 23:13:41 23:13:41 1 none none:none
none:none
none|none
none|none none
none none
none

6ec2a8994b
[Firefox:32 hits: 06-18 to 11-04]
bcf66a38c8
[Firefox:19 hits: 07-30 to 11-04] none[4]
none [none] Win2K-f 2 of 35 23:16:37 23:16:37 1 none none:none
none:none
tElock|
none|none none
none trace
none

7fd7475c63
[Firefox:16 hits: 10-29 to 11-10] none[none] WinXP 35 of 36 11:46:06 11:46:06 1 none none:none
none|none none none

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10]
57ce4acac2
[Firefox:337 hits: 06-17 to 11-10] none[4]
57ce4acac2[1] Win2K-f
WinXP 0 of 33 02:55:07 22:42:56 4 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

779d9aedcd
NEW none[none] WinXP 34 of 36 10:57:55 10:57:55 1 none none:none
none|none none none

6f880fc1bd
NEW none[none] WinXP 36 of 36 03:15:47 03:15:47 1 none none:none
none|none none none

1a2c0e6130
[Firefox:531 hits: 12-31 to 11-10] 048df78048 [0] WinXP 29 of 29 04:00:20 13:53:56 2 none ASM:Graph
none|none 100% lines=61 trace

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10]
a08f3b74a4
[Firefox:1395 hits: 06-18 to 11-10] none[4]
a08f3b74a4[1] Win2K-f
WinXP 0 of 33 00:13:58 18:34:01 4 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

b872c76081
[Firefox:80 hits: 09-13 to 11-10] none[none] WinXP 36 of 36 08:07:05 18:57:58 4 none none:none
none|none none none

dea9ebe9e6
NEW none[none] WinXP 36 of 36 07:23:23 07:23:46 2 none none:none
none|none none none

f3f1ed8b36
[Firefox:25 hits: 11-02 to 11-10] none[none] WinXP 34 of 36 12:17:57 22:23:47 3 none none:none
none|none none none

a0139d7ad8
[Firefox:212 hits: 01-03 to 11-09] d9e9662db1 [0] WinXP 29 of 29 07:39:15 07:55:59 3 none ASM:Graph
PolyEnE| 99% lines=68 trace

41b9df60db
[Firefox: 4 hits: 11-03 to 11-07]
51435ea229
NEW
cada8d5adf
[Firefox: 5 hits: 11-03 to 11-07] none[none]
none [none]
none [none] WinXP 15 of 36 23:11:32 23:24:11 2 none none:none
none:none
none:none
none|none
none|none
none|none none
none
none none
none
none

cc91fb83d8
[Firefox: 2 hits: 10-20 to 11-09]
d224be6e3b
[Firefox: 2 hits: 10-20 to 11-09] none[none]
none [none] Win2K-f 32 of 36 02:50:01 02:50:01 1 none none:none
none:none
none|none
none|none none
none none
none

8a75955033
[Firefox:45 hits: 06-20 to 11-10]
9276c8b36b
[Firefox:45 hits: 06-20 to 11-10] none[4]
9276c8b36b[1] WinXP 28 of 32 11:48:03 11:48:03 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=81 trace
trace

16874933ea
[Firefox:61 hits: 06-18 to 11-08]
76ee340669
[Firefox:61 hits: 06-18 to 11-08] 16874933ea [1]
none [4] WinXP 33 of 33 03:26:05 03:26:05 1 none ASM:Graph
none:none
Armadillo|
PolyEnE| lines=82
none trace
trace

2c0902a088
NEW
435638f87d
NEW none[none]
none [none] WinXP 7 of 36 15:57:53 15:57:53 1 none none:none
none:none
none|none
none|none none
none none
none

428ae15458
[Firefox:14 hits: 10-14 to 11-10] none[none] WinXP 35 of 36 15:13:05 16:47:45 5 none none:none
none|none none none

07fabc79ef
[Firefox:25 hits: 06-19 to 11-03] 07fabc79ef [1] Win2K-f 0 of 32 02:12:12 02:12:12 1 none ASM:Graph
Armadillo| 47% lines=81 trace

6ec2a8994b
[Firefox:32 hits: 06-18 to 11-04] none[4] Win2K-f 30 of 33 23:16:37 23:16:37 1 none none:none
tElock| none trace

d8676a9adc
NEW none[none] Win2K-f 35 of 36 06:10:31 06:10:31 1 none none:none
none|none none none

2c0902a088
NEW none[none] WinXP 6 of 36 15:57:53 15:57:53 1 none none:none
none|none none none

5d7c7f2ec8
[Firefox: 4 hits: 10-25 to 10-31] none[none] WinXP 35 of 36 03:54:16 03:54:39 2 none none:none
none|none none none

986b59708d
[Firefox:123 hits: 01-14 to 11-09] 8a00217866 [0] WinXP 29 of 29 05:32:16 16:34:43 2 none ASM:Graph
PolyEnE| 100% lines=57 trace

1cc50efd1f
NEW none[none] WinXP 35 of 36 13:04:34 13:04:34 1 none none:none
none|none none none

090753e602
[Firefox: 7 hits: 10-09 to 10-30]
79595a71bb
[Firefox: 7 hits: 10-09 to 10-30] none[none]
none [none] WinXP 33 of 36 01:23:07 01:23:07 1 none none:none
none:none
none|none
none|none none
none none
none

2e43dc0077
[Firefox:14 hits: 10-01 to 11-10] none[none] Win2K-f 34 of 36 01:14:40 01:14:40 1 none none:none
none|none none none

bac73bbac0
NEW none[none] WinXP 35 of 36 07:30:23 07:30:23 1 none none:none
none|none none none

04ed4d2967
[Firefox: 2 hits: 11-08 to 11-10] none[none] WinXP 35 of 36 10:20:37 10:20:37 1 none none:none
none|none none none

0b7b6cbb7c
NEW none[none] Win2K-f 12 of 36 11:04:00 11:04:00 1 none none:none
none|none none none

96d089e522
[Firefox:70 hits: 10-08 to 11-10] none[none] WinXP 34 of 36 04:37:50 10:21:30 2 none none:none
none|none none none

16874933ea
[Firefox:61 hits: 06-18 to 11-08] 16874933ea [1] WinXP 29 of 33 03:26:05 03:26:05 1 none ASM:Graph
Armadillo| 48% lines=82 trace

ad592e0c24
[Firefox: 2 hits: 11-10 to 11-10] none[none] WinXP 34 of 34 05:19:21 05:19:23 2 none none:none
none|none none none

53bfe15e91
[Firefox:3886 hits: 06-17 to 11-10]
73f1082158
[Firefox:1928 hits: 06-18 to 11-10]
e07c29c4ae
[Firefox:828 hits: 06-19 to 11-10] none[4]
73f1082158[1]
e07c29c4ae[1] WinXP 0 of 33 03:26:05 16:51:32 5 none none:none
ASM:Graph
ASM:Graph
tElock|
Armadillo|
FSG| 48% none
lines=81
lines=92 trace
trace
trace

d6e2715c83
NEW none[none] WinXP 36 of 36 19:52:22 19:52:47 2 none none:none
none|none none none

554d29724f
NEW none[none] WinXP 34 of 36 15:48:28 15:48:28 1 none none:none
none|none none none

e50d19ea22
[Firefox: 6 hits: 10-21 to 11-09] none[none] WinXP 33 of 35 14:32:09 14:32:09 1 none none:none
none|none none none

fbb3d0b43b
NEW none[none] WinXP 35 of 36 13:56:42 13:56:42 1 none none:none
none|none none none

8a75955033
[Firefox:45 hits: 06-20 to 11-10] none[4] WinXP 29 of 32 11:48:03 11:48:03 1 none none:none
tElock| none trace

0fe6a497e1
[Firefox: 2 hits: 10-31 to 11-02] none[none] WinXP 35 of 36 10:24:10 10:24:10 1 none none:none
none|none none none

bb02604f4e
NEW none[none] Win2K-f 10 of 36 06:54:28 06:54:28 1 none none:none
none|none none none

d5477a0736
NEW none[none] WinXP 34 of 35 21:48:32 21:48:32 1 none none:none
none|none none none

771f87c713
[Firefox: 4 hits: 11-02 to 11-04] none[none] WinXP 35 of 36 02:29:53 02:29:53 1 none none:none
none|none none none

7f60162c2c
[Firefox:857 hits: 12-31 to 11-10] 1aad8e4632 [0] WinXP 25 of 25 01:10:06 23:33:13 4 none ASM:Graph
PolyEnE| 100% lines=93
embedded dns trace

4a60e2ace3
NEW none[none] WinXP 35 of 36 09:36:22 09:36:22 1 none none:none
none|none none none

24e4c28fdb
[Firefox: 4 hits: 10-25 to 11-04] none[none] WinXP 34 of 35 14:41:50 14:41:50 1 none none:none
none|none none none

e9ee0d4d34
[Firefox: 5 hits: 09-15 to 10-08] none[none] Win2K-f 24 of 36 14:41:29 14:41:29 1 none none:none
none|none none none

fb8f82fcb3
[Firefox:26 hits: 10-24 to 11-09] none[none] Win2K-f 11 of 36 04:44:39 18:02:39 3 none none:none
none|none none none

41b9df60db
[Firefox: 4 hits: 11-03 to 11-07] none[none] WinXP 21 of 36 23:11:32 23:24:11 2 none none:none
none|none none none

71b183b0c8
[Firefox:47 hits: 09-17 to 11-08] none[none] WinXP 36 of 36 22:48:35 22:48:35 1 none none:none
none|none none none

3ae357d17b
[Firefox:197 hits: 01-01 to 11-10] 462a7be171 [0] WinXP 29 of 29 19:57:24 19:57:24 1 none ASM:Graph
PolyEnE| 99% lines=73 trace

d8676a9adc
NEW
e3ed1fdcbf
NEW none[none]
none [none] Win2K-f 32 of 36 06:10:31 06:10:31 1 none none:none
none:none
none|none
none|none none
none none
none

ad3877cadf
NEW none[none] WinXP 35 of 36 08:31:00 08:31:00 1 none none:none
none|none none none

805afbac09
[Firefox: 5 hits: 10-31 to 11-10] none[none] WinXP 34 of 36 02:13:55 23:24:24 3 none none:none
none|none none none

7d99b0e910
[Firefox:1487 hits: 12-31 to 11-10] 7a70e1b592 [0] WinXP 26 of 28 06:35:22 21:55:19 6 none ASM:Graph
PolyEnE| 99% lines=68 trace

561a30ff73
NEW none[none] WinXP 34 of 35 11:04:07 11:05:15 2 none none:none
none|none none none

18369c36f5
[Firefox: 4 hits: 09-24 to 09-27] none[none] Win2K-f 30 of 35 22:54:06 22:54:06 1 none none:none
none|none none none

1149931cfa
NEW none[none] WinXP 35 of 36 17:15:21 17:15:21 1 none none:none
none|none none none

168aab35a3
[Firefox:188 hits: 06-17 to 11-10]
61426996c3
[Firefox:19 hits: 06-20 to 11-09] none[4]
61426996c3[1] Win2K-f 29 of 32 19:45:41 19:45:41 1 none none:none
ASM:Graph
tElock|
Armadillo| 47% none
lines=82 trace
trace

a7c2fdb697
NEW none[none] WinXP 35 of 36 15:42:28 15:42:28 1 none none:none
none|none none none

b27d73bfcb
[Firefox:48 hits: 10-10 to 11-10] none[none] WinXP 35 of 36 13:32:23 15:24:22 3 none none:none
none|none none none

817c4faa32
NEW none[none] WinXP 34 of 36 21:01:30 21:01:30 1 none none:none
none|none none none

1509c8d024
[Firefox:43 hits: 06-17 to 11-07] none[4] Win2K-f 31 of 33 04:17:33 04:17:33 1 none none:none
tElock| none trace

090753e602
[Firefox: 7 hits: 10-09 to 10-30] none[none] WinXP 32 of 36 01:23:07 01:23:07 1 none none:none
none|none none none

2ef9098242
[Firefox: 5 hits: 07-05 to 10-26] none[none] Win2K-f 30 of 33 23:13:41 23:13:41 1 none none:none
none|none none none

4c3df24b32
[Firefox:247 hits: 06-17 to 11-10]
565d32972d
NEW 4c3df24b32 [1]
none [none] Win2K-f 10 of 36 04:44:39 04:44:39 1 none ASM:Graph
none:none
Armadillo|
none|none lines=81
none trace
none

6b1c6d0395
[Firefox: 9 hits: 09-18 to 10-31] none[none] WinXP 34 of 36 09:34:11 09:34:11 1 none none:none
none|none none none